You appear to have installed an SSL certificate on your site. That’s good, but it only makes your website capable of using HTTPS, it doesn’t actually mean that it’s actually used.
If you want all visitors to only use HTTPS, you’ll have to set that up yourself.