Last updated: October 31, 2026.

1. Who we are

Moss & Loop (“we”, “us”) operates this website (bilin.net), an online store selling crochet, embroidery and punch-needle kits to customers worldwide. The business is operated by Moss & Loop, Shenzhen, Guangdong, China. For contact details, please contact us via our Contact page (https://bilin.net/contact/).

2. Information we collect

  • Order and account data: name, email, phone, billing and shipping address, order history, and account login (if you create one).
  • Payment data: card payments are processed by Stripe and PayPal. We never see or store your full card number; we receive only limited details (e.g. card brand, last 4 digits, transaction ID).
  • Communications: messages you send us, and newsletter preferences if you subscribe.
  • Device and usage data: IP address, browser, pages viewed and referral source, collected through cookies and similar technologies (see section 5 and our Cookie Policy).

3. How we use it

  • To process, ship and support your order, including customs paperwork.
  • To prevent fraud and keep the site secure.
  • To send order and shipping emails, and marketing emails only if you opt in (unsubscribe any time).
  • To measure and improve the site and our advertising, only with your consent where required.
  • To meet legal, tax and accounting obligations.

Legal bases (UK and European Economic Area visitors): we process your data to perform our contract with you (orders, delivery, support), to comply with legal obligations (tax, accounting, customs), for our legitimate interests (fraud prevention, site security and improving our service), and, where you have given it, on the basis of your consent (marketing emails, analytics and advertising cookies). You can withdraw consent at any time.

4. Who we share it with

  • Payment processors: Stripe and PayPal, under their own privacy policies.
  • Shipping and customs: postal and courier carriers (e.g. China Post / ePacket and destination postal services) and customs authorities receive your name, address, phone and the contents and value of your parcel.
  • Service providers: web hosting, email delivery, and our store platform (WordPress / WooCommerce).
  • Analytics and advertising (with consent): Google (Google Analytics 4), Meta (Facebook/Instagram Pixel) and TikTok (TikTok Pixel).
  • Authorities, where required by law.

We do not sell your personal information for money. Sharing data with advertising partners through pixels may be considered a “sale” or “sharing” under some US state laws; you can opt out at any time (section 7).

5. Cookies and consent

We use a consent banner (Complianz). Essential cookies (cart, checkout, security) are always on. Analytics and marketing cookies load only according to your choice. We use Google Consent Mode v2, so Google tags adjust their behaviour to your consent settings. You can change your choice any time via the “Manage consent” link.

6. International transfers

Moss & Loop is based in China, and our fulfilment partners and service providers may process data in China, the United States and other countries. Your information may therefore be stored or processed outside your country, state or province, where data-protection laws differ from those where you live. Where required (for example for visitors from the UK and European Economic Area), we rely on appropriate safeguards such as standard contractual clauses or the transfer being necessary to perform your order.

7. Your rights

United States: depending on your state (e.g. California CCPA/CPRA), you may request access, correction or deletion of your data, and opt out of the sale/sharing of personal information or targeted advertising. We honour Global Privacy Control signals.

Canada: under PIPEDA (and Quebec Law 25 where applicable), you may access and correct your personal information and withdraw consent, subject to legal limits.

United Kingdom and European Economic Area: under the UK GDPR and EU GDPR you have the right to access your personal data, have it corrected or erased, restrict or object to its processing, receive a portable copy, and withdraw consent at any time. You also have the right to complain to your local data-protection authority (in the UK, the Information Commissioner’s Office).

Australia, New Zealand and other countries: you may ask to access or correct the personal information we hold about you, and to complain about how we handle it, under the privacy laws that apply where you live (for example the Australian Privacy Act 1988 or the New Zealand Privacy Act 2020).

To make a request, please contact us via our Contact page (https://bilin.net/contact/). We will verify your identity and respond within the time required by law. We will not discriminate against you for exercising your rights.

8. Retention

Order records are kept as long as required for tax and accounting (generally up to 7 years). Marketing data is kept until you unsubscribe. Analytics data is kept according to the provider’s retention settings (GA4: 14 months).

9. Security

The site uses HTTPS encryption. Payments are handled by PCI-compliant processors. No method is 100% secure, but we take reasonable measures to protect your data.

10. Children

Our store is not directed at children under 13 (or under 16 where applicable), and we do not knowingly collect their data.

11. Changes

We may update this policy; the date at the top shows the latest version.

12. Contact

Moss & Loop, Shenzhen, Guangdong, China. For any privacy question or request, please contact us via our Contact page (https://bilin.net/contact/).