Manage data privacy settings in your HubSpot account

Data privacy laws, such as General Data Protection Regulation (GDPR), exist to enhance the protection of individuals' data. These laws also increase the obligations of organizations that collect or process personal data.

Data privacy settings provide a central location for enabling features that support compliance efforts throughout your account.

Please note: for EU accounts created on or after June 18, 2025 (i.e., data storage is based in the EU), data privacy settings are turned on by default. It's recommended to keep the settings on to help your account remain compliant with GDPR, but you can turn them off if needed.

Please note: while these features live in HubSpot, your legal team is the best resource to give you compliance advice for your specific situation.

Turn on data privacy settings

To turn data privacy settings on for your account:

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, select Privacy & Consent. 
3. To enable data privacy settings, toggle the Data privacy settings switch on. In the dialog box, click Yes, turn on data privacy settings.
   
   
   • To only send marketing emails to contacts with a consent to communicate, toggle the Send emails to contacts with legal basis switch on. In the dialog box, click Confirm. This is recommended for Europe to comply with GDPR and other privacy laws.
     • To change the default legal basis to communicate for customer supporrt survey emails, in the Set a justification for sending your contacts customer support surveys section:
       • Click Update legal basis.
       • In the dialog box, click the Default legal basis for surveys dropdown menu and select an option.
       • In the Explanation for permission or consent field, enter an explanation.
       • Click Save.
   • The cookie consent banner is toggled ON by default. Click Edit consent banner to make changes to it.

Please note: consent to communicate is email-based. Contacts must give consent for each email address they would like to receive emails for.

6. • Newly created forms will include a data privacy section in the footer of the forms. For existing forms, add notice and consent information for each form.
   • Meeting pages created after data privacy settings has been turned on will include a data privacy section. Click View meeting pages to see which meetings don't include a data privacy section.
   • Scheduling pages will include the notice/consent messaging by default. Scheduling pages created before data privacy settings are turned on will not be updated to include this message.
   • Unsubscribe links are turned ON by default for sales one-to-one and sequences emails for users that don't yet have them enabled.
   • If you're using the HubSpot Sales extension or add-in, banners on contact records will be displayed, notifying you if a contact doesn't have a legal basis for processing.
   • Ability to add communication consent and legal basis for processing to contacts via a list import, bulk edit, or manual contact creation.
   • Tracking (opens and clicks) for emails won't be added for contacts without legal basis.

Turn off data privacy settings

To turn data privacy settings off in your account:

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, select Privacy & Consent. 
3. To disable data privacy settings, toggle the Data privacy settings switch off.
4. In the dialog box, review the changes that'll occur in your account, then click Turn off data privacy settings to confirm.

Please note: if you turn off data privacy settings in your account, the cookie consent banner will not be automatically turned off. 

Delete contacts

Under data privacy laws such as the General Data Protection Regulation (GDPR), contacts in your account have the right to request that you delete all of their personal data.

Permanent delete functionality is available to all accounts, even if data privacy settings are turned off. When deleting a contact you'll have two options:

• Restorable delete a contact to keep the option to restore within 90 days.
• Permanent delete the contact to comply with GDPR and other data privacy laws.