Privacy policy

Last updated: September 17, 2026

This Privacy Policy is effective as of the "Last updated" date above.

This Privacy Policy explains how Carto Ventures, Inc. ("Carto Ventures," "we," "us," or "our") collects, uses, and discloses your personal information when you visit or make a purchase from The Globe Store at globestore.com (the "Site"), or otherwise interact with us (together, the "Services"). The Globe Store is a Carto Ventures brand. Our Services are directed to customers in the United States.

Please read this policy carefully. If you have questions, contact information is at the end of this policy. If there is a conflict between our Terms of Service and this Privacy Policy on a privacy matter, this Privacy Policy controls.

At a glance:

Advertising and analytics cookies, pixels, and similar technologies run only after you accept them through our cookie banner. Essential cookies needed to run the store always operate.
We name the advertising and analytics platforms we work with: Google (Google Analytics 4 and Google Ads/DoubleClick, loaded through Google Tag Manager), Meta (Meta Pixel and the server-side Meta Conversions API), Microsoft Advertising (Bing UET), and Pinterest (the Pinterest tag).
Sharing data with these advertising platforms may be a "sale" or "sharing" under some state privacy laws. You can opt out at any time: Do Not Sell or Share My Personal Information.
We do not sell personal information for money, we do not sell sensitive personal information, and we do not knowingly sell or share the personal information of consumers under 16.
We recognize the Global Privacy Control (GPC) browser signal as an opt-out request, as described in Section 5.

1. Personal Information We Collect

If you buy our products through another platform we sell on (see Section 4), we receive your order and contact information from that platform.

The table below shows the categories of personal information we have collected in the preceding 12 months, examples, where it comes from, the purposes for which we collect and use it (described further in Section 2), the categories of recipients we disclose it to for business purposes, and whether it is "sold" or "shared" (as those terms are defined under state privacy laws) with the advertising platforms named in Section 4. Our retention criteria for each category are in Section 10.

Category	Examples	Sources	Purposes (see Section 2)	Disclosed to (categories of recipients)	Sold or shared for targeted advertising?
Identifiers	Name, email address, phone number, billing and shipping address, account ID, IP address, device and browser identifiers	You; automatically via the Services (post-consent for advertising/analytics identifiers); our e-commerce platform provider; platforms we sell through (see Section 4)	Order fulfillment and delivery; account management; customer support; marketing and, with your consent, advertising; security and fraud prevention; legal compliance	E-commerce platform provider; payment processors; shipping carriers and fulfillment providers; order management systems; our order-tracking and returns provider; customer support platforms; email service providers; fraud-prevention services	Yes — advertising platforms named in Section 4 (e.g., hashed email, IP address, device identifiers)
Commercial information	Products viewed, items added to cart, purchases, order history, returns	You; automatically via the Services; platforms we sell through (see Section 4)	Order processing and fulfillment; merchandising and Site improvement; customer support; with your consent, advertising and ad measurement; legal compliance	E-commerce platform provider; payment processors; shipping carriers and fulfillment providers; order management systems; our order-tracking and returns provider; customer support platforms	Yes — advertising platforms named in Section 4 (e.g., product-view, add-to-cart, and purchase events)
Financial information	Payment card details and payment confirmation, collected and processed by our payment processors	You (entered at checkout, processed by payment processors)	Payment processing; security and fraud prevention; legal compliance	Payment processors; fraud-prevention services	No
Internet or other electronic network activity	Pages viewed, referring website, time on site, interactions with the Site	Automatically via the Services (advertising/analytics collection only after consent)	Analytics and Site improvement (with your consent); advertising and ad measurement (with your consent); security and fraud prevention	E-commerce platform provider; analytics providers named in Section 4	Yes — advertising and analytics platforms named in Section 4
Approximate geolocation	General location (city/region) derived from IP address; we do not collect precise GPS location	Automatically via the Services	Analytics and advertising measurement (with your consent); security and fraud prevention	E-commerce platform provider; analytics providers named in Section 4	Yes — as part of the advertising/analytics data described in Section 4
Account information	Username and password (log-in credentials), account settings	You	Providing, maintaining, and securing your account	E-commerce platform provider	No
Customer communications	Emails, phone calls, and text or chat messages with our support team (we do not record live support calls; voicemails you leave may be transcribed and emailed to our support team); support requests, reviews or feedback you send us	You	Customer support; resolving order issues and disputes; improving the Services; legal compliance	Customer support platforms; email service providers	No
Inferences	Preferences we derive from your browsing and purchase history (for example, interest in a product category)	Derived from the information above	Merchandising and marketing	Used internally for merchandising and marketing; the advertising platforms named in Section 4 may draw their own inferences from data shared with them	Yes — product-interest signals are included in the browsing and purchase-event data shared with the advertising platforms named in Section 4, which may draw their own inferences from it

The table above describes the categories of personal information we collect. We do not use profiling in furtherance of decisions that produce legal or similarly significant effects about you.

Sensitive personal information

The only sensitive personal information we collect is your account log-in credentials (if you create an account) and the payment card information you enter at checkout, which is collected and processed by our payment processors. We use sensitive personal information only for the purposes permitted by applicable law (such as providing the Services and preventing fraud), we do not use it to infer characteristics about you, and we do not sell sensitive personal information.

2. How We Use Personal Information

We use personal information to:

Provide the Services — process and fulfill your orders, arrange shipping, process payments and returns, maintain your account, and remember your cart and preferences.
Customer support — respond to your questions, resolve order issues, and process warranty or return requests.
Marketing and advertising — send you marketing emails you can unsubscribe from at any time; send text messages about your orders or, where you have agreed to receive them, our offers (reply STOP to any text to opt out); and, with your consent through our cookie banner, show you ads for our products on other websites and apps and measure how our advertising performs (see Sections 4 and 5).
Analytics and improvement — understand how visitors use the Site so we can improve it (with your consent for third-party analytics).
Security and fraud prevention — detect and prevent fraudulent transactions and protect the Site, our customers, and our business.
Legal compliance — comply with tax, accounting, consumer-protection, and other legal obligations, and establish or defend legal claims.

We do not use your personal information to train artificial-intelligence or large-language models, and we do not sell or share it for such training.

3. Cookies, Pixels, and Similar Technologies

We and the third parties named below use cookies, pixels (also called web beacons), tags, and similar technologies on the Site. We also share certain information through server-to-server connections, described below — not all data sharing happens in your browser.

Our cookie consent banner

When you first visit the Site, a cookie banner asks whether you accept advertising and analytics technologies. Advertising and analytics cookies, pixels, and similar technologies load only after you accept them through the banner. If you do not accept, they do not run. Essential cookies — those required to operate the store, such as keeping items in your cart, enabling checkout, and remembering your consent choice — always operate. You can change or withdraw your consent at any time by clearing your cookies (which will cause the banner to appear again the next time you visit) or by using the Do Not Sell or Share My Personal Information page linked in the footer of every page.

The platforms we use

After you consent, the following advertising and analytics platforms operate on the Site:

Google — Google Analytics 4 (site analytics) and Google Ads / DoubleClick (advertising and ad measurement), loaded through Google Tag Manager. Google's privacy policy
Meta (Facebook and Instagram) — the Meta Pixel, which runs on the page, and the Meta Conversions API, a server-to-server connection through which we transmit certain order and event information (such as hashed email addresses and purchase details) from our systems directly to Meta. Meta's privacy policy
Microsoft Advertising — the Bing UET tag (advertising and ad measurement). Microsoft's privacy statement
Pinterest — the Pinterest tag (advertising and conversion measurement). Pinterest's privacy policy

These platforms receive information such as the pages and products you view, items you add to your cart, your purchases, your IP address, and device identifiers, and they may use that information for their own purposes, including advertising, as described in their own privacy policies. The Meta Conversions API operates only after you consent through the cookie banner. You can opt out of this sharing at any time using the Do Not Sell or Share My Personal Information link, and we process opt-out requests as required by applicable law.

We also advertise on AI assistant platforms (such as OpenAI's ChatGPT). Buying advertising placements on those platforms does not by itself involve your personal information. If we adopt an AI platform's ad-measurement technology on our Site, it will operate only after you accept advertising technologies through our cookie banner, like the platforms above, and we will update this policy to name it.

Separately, product-page reviews are provided by Judge.me, a third-party review platform, which processes the review content and name you choose to submit (Judge.me's privacy policy).

This sharing may constitute a "sale" or "sharing" of personal information, or "targeted advertising," under some state privacy laws. You can opt out at any time here: Do Not Sell or Share My Personal Information (globestore.com/pages/data-sharing-opt-out).

4. How We Disclose Personal Information

We disclose personal information in the following circumstances:

Service providers. We use companies that perform services on our behalf, described by category: our e-commerce platform provider (Shopify — see Section 8), payment processors, shipping carriers (such as FedEx, UPS, or the U.S. Postal Service), fulfillment providers, order management systems, customer support platforms, email service providers, fraud-prevention services, our order-tracking and returns provider, accounting systems, and professional advisors (such as accountants and attorneys). Some orders are packed and shipped directly to you by our product suppliers and warehouses on our behalf; they receive the name, shipping address, contact details, and order information needed to deliver your order. These providers are permitted to use personal information only to provide services to us.
Advertising and analytics platforms. The named platforms in Section 3 — Google, Meta, Microsoft Advertising, and Pinterest — receive browsing, product-view, cart, and purchase-event data through on-page pixels and tags and, in Meta's case, also through the server-side Conversions API. These companies may use the data for their own purposes, including advertising. We do not sell personal information for money. We do "sell" or "share" personal information, as those terms are defined by some state privacy laws, with these advertising and analytics platforms. You can opt out here: Do Not Sell or Share My Personal Information.
Within our company. Carto Ventures, Inc. operates other retail brands; personal information may be used within the same company for the purposes described in this policy.
At your direction. When you ask us to share information — for example, providing your shipping address to a carrier to deliver your order.
Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, personal information may be transferred as part of that transaction.
Legal reasons. To comply with law, respond to lawful requests from public authorities, enforce our terms, or protect the rights, property, or safety of Carto Ventures, our customers, or others.

We do not disclose personal information to data brokers.

Buying from us on other platforms

You can also find and buy our products on platforms we sell through, including TikTok Shop, Facebook and Instagram Shops, Google and YouTube, Microsoft (Bing) Shopping, Pinterest, and the Shop app — and, as this technology develops, through AI assistant (agentic) shopping experiences. When you browse or buy on one of these platforms, the platform collects your information under its own privacy policy, as an independent business. It shares with us the information we need to process and deliver your order — such as your name, shipping address, contact details, and what you ordered — and once we receive it, we handle it as described in this policy.

5. Your Choices

Cookie banner. Accept, decline, or change your consent to advertising and analytics technologies at any time (Section 3).
Opt out of sale/sharing and targeted advertising. Use the Do Not Sell or Share My Personal Information page, which is also linked in the footer of every page of the Site.
Global Privacy Control. Our website recognizes the Global Privacy Control (GPC) browser signal. If your browser or browser extension sends a GPC signal, we treat it as a valid request to opt out of the "sale" or "sharing" of your personal information and of targeted advertising, as required by applicable state privacy laws. The opt-out applies to the browser and device from which the signal is sent. It does not stop data processing needed to provide our services (such as fulfilling your order), and it does not opt you out of marketing emails, which you can unsubscribe from separately. You can also opt out at any time using the Do Not Sell or Share My Personal Information link in our website footer. To learn more about GPC, visit globalprivacycontrol.org. Other than the Global Privacy Control, we do not respond to "Do Not Track" browser signals, for which no industry standard has been adopted.
Platform-level ad controls. You can also manage advertising preferences directly with the platforms: Google Ads Settings, Meta ad preferences, Microsoft's opt-out page, and Pinterest's personalization settings.
Marketing emails. Unsubscribe at any time using the link in any marketing email. We will still send transactional messages about your orders and account.
Text messages. Reply STOP to any text message from us to opt out. We may still send order-related texts where permitted, and you can ask us to stop those as well.

6. Your United States Privacy Rights

We extend the rights below to all U.S. residents, regardless of the state you live in. State privacy laws vary (for example, not every state provides a correction right), but we will honor a verifiable request for any of these rights from any U.S. resident.

Right to know / access — request the personal information we have collected about you, including the categories collected, the sources, the purposes, the categories of recipients, and the specific pieces of information.
Right to delete — request that we delete personal information we have collected from you, subject to legal exceptions (for example, we must keep records of completed transactions for tax and accounting purposes).
Right to correct — request that we correct inaccurate personal information.
Right to portability — receive a copy of your personal information in a portable, readily usable format.
Right to opt out of "sale," "sharing," and targeted advertising — use the Do Not Sell or Share My Personal Information page, the footer link on any page of the Site, or a Global Privacy Control signal (Section 5).
Right to opt out of certain profiling — we do not use profiling in furtherance of decisions that produce legal or similarly significant effects about you, so there is no such processing to opt out of. If that ever changes, we will update this policy first, and you will have the right to opt out and to question the result of such profiling.
Right to limit use of sensitive personal information — we do not use or disclose sensitive personal information for purposes that would require a right to limit under applicable law, and we do not sell sensitive personal information.
Right to non-discrimination — we will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised any of these rights.

How to submit a request

Email privacy@globestore.com, use the opt-out page linked above, or reach us through any contact method listed on our Site. However you reach us, we will treat a clear request to exercise your privacy rights as a valid request. We will confirm receipt and respond within the time required by applicable law (generally 45 days, extendable once where permitted).

Verification. Requests to opt out of sale or sharing (including via the opt-out page or a Global Privacy Control signal) do not require verification — we may ask only for information needed to apply the opt-out to your browser, device, or account. For other requests, we will verify your identity by matching information you provide (such as your email address and recent order details) against our records. We may ask for additional information where necessary; we use it only for verification. Exercising your rights is free of charge, except where applicable law permits a reasonable fee for manifestly unfounded, excessive, or repetitive requests.

Authorized agents. You may use an authorized agent to submit a request. We will require proof of the agent's authorization (such as a signed permission) and may still need to verify your identity directly.

Appeals. If we decline your request, you may appeal by replying to our response or contacting us using the details above, and we will respond to your appeal as required by law. If your appeal is denied, residents of certain states may contact their state Attorney General.

California disclosures

Notice at collection. The table in Section 1 lists, for each category of personal information: the examples we collect, the sources, the purposes for which we collect and use it, the recipients, and whether it is sold or shared. The purposes are described further in Section 2, and our retention criteria for each category are in Section 10. The opt-out link is Do Not Sell or Share My Personal Information, and this policy — including the Section 1 notice at collection — is linked in the footer of every page.
Categories sold or shared in the preceding 12 months. We have not sold personal information for money. We have "shared" (and, under the broad statutory definition, may be deemed to have "sold") the following categories for cross-context behavioral advertising:

Category	Categories of recipients	Purpose
Identifiers (e.g., hashed email address, IP address, device identifiers)	Advertising and analytics platforms: Google, Meta, Microsoft Advertising, Pinterest	Targeted advertising and advertising measurement
Commercial information (e.g., product views, cart events, purchases)	Advertising and analytics platforms: Google, Meta, Microsoft Advertising, Pinterest	Targeted advertising and advertising measurement
Internet or other electronic network activity	Advertising and analytics platforms: Google, Meta, Microsoft Advertising, Pinterest	Targeted advertising, analytics, and advertising measurement
Approximate geolocation (derived from IP address)	Advertising and analytics platforms: Google, Meta, Microsoft Advertising, Pinterest	Targeted advertising, analytics, and advertising measurement
Inferences (product-interest signals included in shared browsing and purchase-event data)	Advertising and analytics platforms: Google, Meta, Microsoft Advertising, Pinterest	Targeted advertising and advertising measurement

Categories disclosed for a business purpose in the preceding 12 months. All categories listed in Section 1, to the categories of service providers shown in that table.
Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted by California regulations, and we do not sell it. For that reason, we do not offer a separate "Limit the Use of My Sensitive Personal Information" link.
Minors. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
Shine the Light (Civil Code § 1798.83). California residents may request information about disclosures of personal information to third parties for those parties' own direct marketing purposes by contacting us using the details in Section 13. Our disclosures to advertising platforms, and your ability to opt out of them, are described in Sections 3-5.

Additional state-specific notes

Oregon and Minnesota residents may request a list of the specific third parties to which we have disclosed personal information. Email privacy@globestore.com to make this request; we honor such requests from any U.S. resident.
Minnesota residents also have the right to question the result of profiling that produces legal or similarly significant effects; as stated above, we do not conduct such profiling.
Colorado, Connecticut, Texas, and other states requiring universal opt-out mechanisms: we treat a recognized opt-out preference signal such as Global Privacy Control as described in Section 5.
Nevada residents: Nevada law allows you to direct certain website operators not to sell covered information. We do not sell covered information as defined by Nevada law, but you may submit such a request to our designated address: privacy@globestore.com. We will respond within 60 days.

7. Children's Privacy

The Site is a general-audience store. We sell globes, maps, and geography products that families and children enjoy, but the Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe a child under 13 has provided us personal information, please contact us using the details in Section 13 and we will delete it.

We do not knowingly sell or share the personal information of consumers under 16 — or under 18 where state law requires — and we do not knowingly use minors' personal information for targeted advertising.

8. Our Relationship with Shopify

The Site is hosted on Shopify, the e-commerce platform that powers our store, processes checkout, and provides related services (including fraud prevention and the cookie-consent and privacy tools described in this policy). Shopify processes your personal information as our service provider, and for certain features (such as Shop Pay and Shopify's own services you choose to use) as an independent business. You can learn more in the Shopify Consumer Privacy Policy, and you may exercise certain rights with respect to information held by Shopify through the Shopify Privacy Portal.

9. Third-Party Websites and Links

The Site may contain links to websites operated by other companies, and our products may be discussed or sold on third-party platforms. We are not responsible for the privacy practices of third-party websites. Information you provide on any other website is governed by that website's privacy policy, and we encourage you to read it.

10. Data Security and Retention

Security. We use reasonable administrative, technical, and physical safeguards designed to protect personal information, and our payment processors handle card data in accordance with industry security standards. No method of transmission or storage is completely secure, however, so we cannot promise absolute security. Please protect your account password and contact us if you suspect unauthorized activity.

Retention. We keep personal information only as long as reasonably necessary for the purposes described in this policy. Our retention criteria for each category of personal information listed in Section 1 are:

Identifiers, commercial information, and financial information — retained with the associated order and transaction records, which we keep as required for tax, accounting, warranty, and legal compliance purposes.
Account information — retained while your account is active, plus a reasonable wind-down period after closure.
Customer communications — retained for a limited period after your issue is resolved, in case of follow-up questions or disputes.
Internet or other electronic network activity and approximate geolocation — collected for advertising and analytics only with your consent and retained according to your consent choices and the platforms' retention settings.
Inferences — retained while used for merchandising and marketing, then deleted or de-identified.
Marketing data — retained until you unsubscribe or withdraw consent, after which we retain only what is needed to honor your opt-out.
Fraud-prevention and legal-claims data — retained as long as needed to protect against fraud or to establish or defend legal claims.

11. International Visitors

Our Services are directed to customers in the United States, and your personal information is processed and stored in the United States and in other countries where we or our service providers operate. If you visit the Site from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time — including to reflect changes in our practices, technologies, or legal requirements. When we do, we will post the revised policy on this page and update the "Last updated" date at the top. If we make material changes, we will provide additional notice, such as a notice on the Site or an email where appropriate. We review this policy whenever we add or change an advertising or analytics technology, or a customer-communication tool (including phone or chat tooling), on the Site.

13. Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at privacy@globestore.com, reach us through any contact method listed on our Site, or write to:

Carto Ventures, Inc. PO Box 954224 Lake Mary, FL 32795 United States