If it's a refund, why is it due?
My god why do they not at least put in the slightest amount of effort to use HTTPS?