Create an account. Immediately go to Settings and add your PGP Public Key. Enable 2FA.
Go to Wallet. Decrypt your wallet address using PGP. Send XMR. Wait for 10 confirmations.
Find your product. Check vendor reviews. Click "Buy".
ALWAYS encrypt your address with the vendor's PGP key yourself. Do not rely on auto-encryption if you can avoid it.