Manage data privacy requests

Set up your data privacy request page where contacts can submit requests related to their personal data, such as data access and deletions. For any requests made outside of the page, you can manually create data privacy requests for contacts.

By default, all requests from contacts with enriched data will be received, this setting cannot be changed. You can review the status of all requests in the data privacy request manager. 

Please note: while HubSpot provides this feature, your legal team is the best resource to give you compliance advice for your specific situation.

Set up a data privacy request page

Configure and publish a data privacy request page for contacts who visit your website to request actions related to their personal data. 

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent. 
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. In the Data privacy request page section, click Configure. In the data privacy request page editor, you can select the data request options that you'd like to offer your contacts:
   • To allow contacts to request the permanent deletion of their personal data, click to toggle the Delete contact data switch on.
   • To allow contacts to request a copy of their data, click to toggle the Export contact data switch on.
   • To add a country field, click to toggle the Country switch on.
   • To turn on CAPTCHA for your request page, click to toggle the ReCAPTCHA switch on. CAPTCHA adds a step to verify that a visitor isn't a robot, before they can submit the request. HubSpot uses reCAPTCHA v2 for spam prevention.
   • In the Business email field, enter an email address. The email address will be used in the verification email sent to users, to ask questions about data privacy.
5. After setting up your page, in the top right, click Publish page. 

Manage or unpublish your data privacy request page

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. To update an existing data privacy request page, click Edit.
5. To share the data privacy request page, copy the page URL.
6. To unpublish an existing data privacy request page, click Unpublish page. In the dialog box, click Unpublish to confirm.  
   

Manage data privacy requests

After publishing your data privacy request page, review and manage data privacy requests from the data request manager. You can also manually create data privacy requests for contacts who have made requests without using the form, such as in-person or on a call. Then, complete requests by exporting contact data or permanently deleting a contact. 

For enriched data delete requests, you can action them manually or turn on a setting to automatically delete the data.

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. At the top, click the Data Request Manager tab.
4. On the Data privacy request manager page, you can navigate to different views or create a custom view. Learn how to create and manage saved views. 
5. In each view, you can use the dropdown menus at the top to filter your data requests.
6. To review a specific contact, click the contact's name.
7. To take action on a request, click the request. In the right panel, follow the instructions to complete the request, then click Mark as completed. Click the x in the top right to hide the panel.
8. To take action on multiple requests of the same type, select the checkboxes of the requests. Click the action at the top of the table, then follow the instructions in the dialog box. This will only be available if all selected requests have the same recommended action. For example, select all Data deletion requests, then click Delete contact data at the top of the table.
9. To mark multiple requests as completed, select the checkboxes of the requests, then click Mark as completed at the top of the table. In the dialog box, click Mark as completed to confirm.
10. To assign or reassign an owner to a request:
    • Hover over the owner column in the request. Then, click Assign or Reassign.
    • In the dialog box, click the Owner dropdown menu and select a HubSpot user. Then, click Assign or Reassign. Data privacy requests can only be assigned to Super Admins. 
11. To manually create a data request, in the top right of the table, click Create new request. In the right panel, set up your data request: 
    • Select contact: the contact that you'd like to create the request for. 
    • Request type: the data request type. You can select from Data deletion, Data export, and Enriched data deletion. 
    • Request Date: the date that the data request should be completed by. 
    • Owner: the user assigned to this data privacy request. 
    • At the bottom, click Create new request. 

Automatically action enriched data delete requests

You can turn on a setting to automatically delete enriched data whenever a contact requests you delete their enriched data. With the setting turned on, these requests will be automatically actioned to delete the enriched data, and you'll receive an email when a request is processed.

To turn on the setting:

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. Toggle the Delete enriched data when request is received switch on.

To turn off the setting:

1. In your HubSpot account, click the settings settings icon in the top navigation bar.
2. In the left sidebar menu, in the Account Management section, select Privacy & Consent.
3. On the Setup tab, in the left sidebar menu, click Privacy tools.
4. Toggle the Delete enriched data when request is received switch off.
5. Click Turn off ruleset to confirm.