Hello,
Any requests to private services would need to be made from your backend server running on Render, not from a browser or any client-side code. Anything from the browser would need to be communicating over HTTPS to a public web service.
Feel free to let me know if you still have any questions about this.
Regards,
Matt