All websites need SSL, even if the content is not sensitive. Someone could inject something like "I'm raising money for a charity, send money >>HERE<<, thanks!"

All websites need SSL, even if the content is not sensitive. Someone could inject something like "I'm raising money for a charity, send money >>HERE<<, thanks!" and people that goes on your non sensitive website could get tricked. That's just a simple example, but a more competent attacker would also use your unencrypted traffic to inject malicious code that target some browser vulnerability, or make the visitor download a malware, ...