Privacy policy — HubSpot Marketing Hub

Cited by

Facts read from this source

• Last modified Report an error

  “Last Modified: April 14, 2026”

• Eea UK controller Report an error

  “If you are a website visitor located in the European Economic Area ("EEA") or United Kingdom ("UK"), HubSpot Ireland Limited is the data controller of your Personal Data.”

• Processor role DPA Report an error

  “we act as a processor (or service provider) on behalf of our customers (who are controllers of personal data) under the HubSpot Data Processing Agreement included in the Customer Terms of Service.”

• Dpf certification Report an error

  “HubSpot complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce”

• Dpf ftc jurisdiction Report an error

  “The U.S. Federal Trade Commission (FTC) has jurisdiction over HubSpot’s compliance with the DPF Principles.”

• International transfer mechanisms Report an error

  “we rely upon the the Standard Contractual Clauses (approved by the European Commission and Swiss authorities) and UK Addendum to the Standard Contractual Clauses (approved by the UK authorities) where required.”

• Canada transfers Report an error

  “With respect to personal data received from or transferred to Canada, HubSpot is subject to the regulatory enforcement powers of the Office of the Privacy Commissioner of Canada.”

• Affiliate subprocessors Report an error

  “we may transfer information that may include Personal Data to other HubSpot Affiliates who act as subprocessors, where we have operations for the purposes described in this policy.”

• Encryption at rest transit Report an error

  “commercial industry standard secure encryption methods to protect customer data at rest and in transit, TLS for HubSpot hosted sites, web application firewall protection”

• Retention policy Report an error

  “When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Data and isolate it from any further processing until deletion is possible.”

• Dpf complaint resolution Report an error

  “We will investigate and attempt to resolve any DPF Principles-related complaints within 45 days.”

• Enrichment commercial dataset Report an error

  “We provide information from our commercial dataset to customers who choose to use enrichment products within the Subscription Services as part of their sales, marketing, and other business activities.”

• Tracking code Report an error

  “Our Customers may install the HubSpot Tracking Code on their website to collect information about website visitors.”

• AI training use Report an error

  “we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.”

• Plaid Report an error

  “We use Plaid to securely connect to financial institutions across the U.S.”

• Privacy contact email Report an error

  “For all HubSpot brands (including the Hustle), you may also write to us by e-mail at privacy@hubspot.com.”

• Hustle privacy email Report an error

  “for the Hustle, please contact us at privacy@thehustle.co.”

• Privacy rights Report an error

  “You can request access, correction, updates or deletion of your Personal Data.”

• Opt out mechanism required Report an error

  “requires the inclusion in every email sent using the Subscription Service of an "opt-out" mechanism and other required information.”

• Transactional email opt out Report an error

  “Customers cannot opt out of receiving transactional emails related to their HubSpot Account or the Subscription Service.”

• Marketplace data sharing Report an error

  “We will only share your Personal Data with our Marketplace Partners when you visit and interact with their listing page.”

• Call recording Report an error

  “If you have a call scheduled with a HubSpot representative, we may record and transcribe the call. You will be notified prior to the call that the call is being recorded, and you will be offered an opportunity to opt-out”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Channels & personalisation
• The Data Protection Officer Consent, tracking & profiling
• The Data Protection Officer CRM integration & data model
• The Data Protection Officer European sovereignty
• The Data Protection Officer Lead scoring, routing & lifecycle
• The Data Protection Officer Channels & personalisation
• The Data Protection Officer Consent, tracking & profiling
• The Data Protection Officer CRM integration & data model
• The Data Protection Officer European sovereignty
• The Data Protection Officer Channels & personalisation
• The Data Protection Officer Consent, tracking & profiling
• The Data Protection Officer European sovereignty
• The Data Protection Officer Channels & personalisation
• The Data Protection Officer Consent, tracking & profiling
• The Data Protection Officer European sovereignty
• The Demand Gen Lead Consent, tracking & profiling
• The Demand Gen Lead European sovereignty
• The Demand Gen Lead Consent, tracking & profiling
• The Demand Gen Lead CRM integration & data model
• The Demand Gen Lead European sovereignty
• The Demand Gen Lead Channels & personalisation
• The Demand Gen Lead Consent, tracking & profiling
• The Demand Gen Lead European sovereignty
• The Demand Gen Lead Lead scoring, routing & lifecycle
• The Demand Gen Lead Consent, tracking & profiling
• The Demand Gen Lead European sovereignty
• The Lifecycle Marketer Consent, tracking & profiling
• The Lifecycle Marketer European sovereignty
• The Lifecycle Marketer Consent, tracking & profiling
• The Lifecycle Marketer European sovereignty
• The Lifecycle Marketer Channels & personalisation
• The Lifecycle Marketer Consent, tracking & profiling
• The Lifecycle Marketer European sovereignty
• The Lifecycle Marketer Lead scoring, routing & lifecycle
• The Lifecycle Marketer Consent, tracking & profiling
• The Lifecycle Marketer European sovereignty
• The Sales Ops Manager Channels & personalisation
• The Sales Ops Manager Consent, tracking & profiling
• The Sales Ops Manager CRM integration & data model
• The Sales Ops Manager European sovereignty
• The Sales Ops Manager Consent, tracking & profiling
• The Sales Ops Manager CRM integration & data model
• The Sales Ops Manager European sovereignty
• The Sales Ops Manager Channels & personalisation
• The Sales Ops Manager Consent, tracking & profiling
• The Sales Ops Manager European sovereignty
• The Sales Ops Manager Consent, tracking & profiling
• The Sales Ops Manager European sovereignty
• The Skeptic Lead scoring, routing & lifecycle
• The Skeptic Consent, tracking & profiling
• The Skeptic CRM integration & data model
• The Skeptic European sovereignty
• The Skeptic Consent, tracking & profiling
• The Skeptic CRM integration & data model
• The Skeptic European sovereignty
• The Skeptic Channels & personalisation
• The Skeptic Consent, tracking & profiling
• The Skeptic European sovereignty
• The Skeptic Channels & personalisation
• The Skeptic Consent, tracking & profiling
• The Skeptic CRM integration & data model
• The Skeptic European sovereignty
• The Solution Architect Channels & personalisation
• The Solution Architect Consent, tracking & profiling
• The Solution Architect European sovereignty
• The Solution Architect Consent, tracking & profiling
• The Solution Architect CRM integration & data model
• The Solution Architect European sovereignty
• The Solution Architect Channels & personalisation
• The Solution Architect Consent, tracking & profiling
• The Solution Architect CRM integration & data model
• The Solution Architect European sovereignty
• The Solution Architect Channels & personalisation
• The Solution Architect Consent, tracking & profiling
• The Solution Architect European sovereignty