Password protected access as standard, either with or without username (your choice). This also ensures search engines cannot penetrate the site.
Protection is in place to ensure passwords cannot be hacked by the usual "Brute Force" techniques. With a well crafted yet easy to remember password I estimate it would take a powerful computer over 400 years to break through.
The servers use Linux systems which are much more secure than standard Windows (some windows servers can be susceptible to backdoor attacks).
Each page will be set with advanced statistics recording both site based and server based. The site owner can check to see who has visited the site, what pages they accessed and much more.
Exactly what information is gathered by these 2 analytic programs I am not telling here but rest assured it is extensive.
In most cases a HTTPS website is not needed to keep it private, however If you wish your website to have this I can set all that up for you. There are additional costs charged by the hosting company, $25 year for the certificate + a dedicated IP address $2 month + a personal hosting plan $4 month.