Your details, kept simple.

This notice describes the information used by the Chilla order-request website. A request is not a confirmed purchase and no online payment information is collected.

What you provide

When you submit a request, the order inbox receives your name, phone number, city, selected flavors and quantities, delivery preference and contact consent. Email and notes are optional. Please do not provide card numbers, identity documents or other sensitive information in the notes.

Why it is used

The site operator uses these details to review your request and contact you to confirm availability, price, payment arrangements and delivery. Submitting the form does not subscribe you to marketing. This version does not automatically email, text or charge you.

Your browser and the server

Your box is stored in local browser storage so it can survive a page refresh. Personal form fields are not saved in browser storage. A short-lived, HTTP-only session cookie supports secure submission and owner sign-in. A random request identifier and a fingerprint help avoid accidental duplicate submissions. The server keeps submitted requests in its private order database, and uses hashed network/phone identifiers for temporary abuse limits.

Fonts and product artwork

Fonts are requested from Google Fonts. Product and fruit artwork may be served from its original image CDN until the site operator switches to local assets. These providers receive the network information needed to serve those resources. No advertising or analytics tracker is included in this build.

Review and deletion

Only the signed-in operator can read the order inbox or export it. The operator can delete a request and its contact details. Keep your request reference and ask the operator to update or delete it when they contact you. Server backups and exports must be handled privately and removed according to the operator’s retention policy.

Before public launch

This is an initial order-request implementation. The site operator must add their verified business identity, privacy contact, retention period and any locally required terms before opening it to customers. No business address, delivery guarantee or privacy-contact address has been invented.