Manage data privacy requests

Set up your data privacy request page where contacts can submit requests related to their personal data, such as data access and deletions. For any requests made outside of the page, you can manually create data privacy requests for contacts.

By default, all requests from contacts with enriched data will be received; this setting cannot be changed. You can automatically delete enriched data whenever a contact requests you delete their enriched data and review the status of all requests in the data privacy request manager.

Please note: while HubSpot provides this feature, your legal team is the best resource to give you compliance advice for your specific situation.

Set up a data privacy request page

Configure and publish a data privacy request page for contacts who visit your website to request actions related to their personal data. 

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent. 
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. In the Data privacy request page section, click Configure.
5. In the data privacy request page editor, select the data request options that you'd like to offer your contacts: 
   • To allow contacts to request the permanent deletion of their personal data, click to toggle the Delete contact data switch on.
   • To allow contacts to request a copy of their data, click to toggle the Export contact data switch on.
   • To add a country field, click to toggle the Country switch on.
   • To turn on CAPTCHA for your request page, click to toggle the ReCAPTCHA switch on. CAPTCHA adds a step to verify that a visitor isn't a robot, before they can submit the request. HubSpot uses reCAPTCHA v2 for spam prevention.
   • In the Business email field, enter an email address. The email address will be used in the verification email sent to users, to ask questions about data privacy.
   • In the Email sending domain field, select the domain that will be shown in the From field of verification emails.
6. After setting up your page, in the top right, click Publish page. 

Share, update, or unpublish a data privacy request page

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. To update an existing data privacy request page, click Edit.
5. To share the data privacy request page, copy the page URL.
6. To unpublish an existing data privacy request page, click Unpublish page. In the dialog box, click Unpublish to confirm.  
   

Review, action, or create data privacy requests

After publishing your data privacy request page, review and manage data privacy requests from the data request manager. You can also manually create data privacy requests for contacts who have made requests without using the form, such as in-person or on a call. Then, complete requests by exporting contact data or permanently deleting a contact. 

For enriched data delete requests, you can action them manually or automatically delete the data.

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. At the top, click the Data Request Manager tab.
4. On the Data privacy request manager page, you can navigate to different views or create a custom view. Learn how to create and manage saved views. 
5. In each view, you can use the dropdown menus at the top to filter your data requests.
6. To take action on a request, click the request. In the right panel, follow the instructions to complete the request, then confirm the action in the dialog box.
7. To take action on multiple requests of the same type, select the checkboxes of the requests. Click the action at the top of the table, then follow the instructions in the dialog box. This will only be available if all selected requests have the same recommended action. For example, select all Data deletion requests, then click Delete contact data at the top of the table.
8. To mark multiple requests as completed, select the checkboxes of the requests, then click Mark as completed at the top of the table. In the dialog box, click Mark as completed to confirm.
9. To assign or reassign an owner to a request:
   • Hover over the owner column in the request. Then, click Assign or Reassign.
   • In the dialog box, click the Owner dropdown menu and select a HubSpot user. Then, click Assign or Reassign. Data privacy requests can only be assigned to Super Admins. 
10. To manually create a data request, in the top right of the table, click Create new request. In the right panel, set up your data request: 
    • Select the contact that you'd like to create the request for. 
    • Select the data request type. You can select from Data deletion, Data export, and Enriched data deletion. 
    • Select the request date. This is the date that the data request should be completed by. 
    • Select the owner. This is the user assigned to action the data privacy request. 
    • At the bottom, click Create new request. 

Automatically action enriched data delete requests

To automatically delete the enriched data whenever a contact requests you delete their enriched data, the Delete enriched data when request is received setting should be turned on. When turned on, these requests will be automatically actioned to delete the enriched data, and you'll receive an email when a request is processed.

For newly created HubSpot accounts, the setting is turned on by default. For accounts created prior to this default, you can turn on the setting. The setting can also be turned off to manually action the delete requests.

To turn on the setting:

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. Toggle the Delete enriched data when request is received switch on.

To turn off the setting:

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. Toggle the Delete enriched data when request is received switch off.
5. Click Turn off ruleset to confirm.