As a customer, it isn’t required to use a VPN. The communication between you and our server is encrypted so nobody will ever know that you placed an order. Maybe you just googled “cocaine” and accidentally clicked on our website….?
That’s really nothing you should care about, there are thousands of internet users who do so every day.
Nobody can see what you are doing on our website (because of the encryption), your ISP only “knows” that you have been on our website (which is not illegal at all).
Also, there is no situation like “hey, this guy visited a drug website, we’ll tell the cops” because it simply isn’t the ISP’s job.
It would require the cops to have a judicial order so the ISPs even just talk with them. And if we go even further, the ISPs can’t tell the cops anything except that you have visited our website.