iHerb does use industry standard practices for keeping user data private and secure, including SSL encryption for your payment information.
iHerb's current privacy policy indicates that it does not sell your data to third-party subsidiaries, but it may track your online activities to offer personalized product recommendations to you — as many other e-commerce sites do.