As soon as the vendor marks your order in transit, your address is no longer accessible to them. You should always use PGP to encrypt your address - this is for your protection (and the vendor's!) - but if you've already submitted an order unencrypted, there's no point because you can't be sure whether or not the vendor has already seen it.