# [Hubspot GDPR and CCPA Compliance](https://www.cookiebot.com/en/hubspot-and-gdpr/) **In this article, we look at how to make sure your use of HubSpot is GDPR and CCPA compliant and how the Cookiebot consent management platform (CMP) app in HubSpot makes it simple and easy.** · [Try Cookiebot CMP free for 14 days… or forever if you have a small website](https://manage.cookiebot.com/en/signup) · [Go to the Cookiebot CMP App in HubSpot App Marketplace](https://ecosystem.hubspot.com/marketplace/apps/marketing/data-management/cookiebot-220761/) · [Scan your website for free to see what cookies and trackers it uses](https://www.cookiebot.com/) --- ## How does HubSpot work? HubSpot has an umbrella of services that your website can use to increase traffic, optimize marketing leads and automate sales processes. The HubSpot CRM includes – - Marketing Hub - Sales Hub - Service Hub - CMS Hub HubSpot specializes in **inbound marketing**, i.e. getting customers to find your website via search engines, social media and other online platforms rather than having marketers reach out to customers. 1. Attracting visitors to your website 2. Converting them into leads by collecting information about them that can be stored in your HubSpot contact base 3. Converting leads into customers by utilizing the information collected on them; through personalized and targeted content that reaches the lead in the right moment and at the right time. 4. Engaging or delighting the customer with personalized content and attention is the last step in HubSpot’s inbound marketing model; whereby existing customers become crucial figures in attracting new visitors and potential customers. On a practical level, this means anything from automating email sequence, scheduling and tracking, optimizing templates for repeated sales outreaches and predictive customer scoring. In short, HubSpot can help you optimize and automate every part of your website’s marketing dimension. --- ## HubSpot and GDPR Using HubSpot on your website isn’t by default non-compliant with the GDPR, but it requires you to implement a process of obtaining user consents before your process their personal data. The GDPR protects the personal data of individuals inside the EU, regardless of where in the world the website processing their information is located. The GDPR defines personal data broadly as any information relating to an identified or identifiable natural person, including online identifiers such as cookies that collect IP addresses, search and browser history, unique IDs and more. Using HubSpot on your website therefore requires you to operate in compliance with the GDPR. The GDPR requires you to – - Inform your users of all cookies and trackers in operation; their duration, provider and purpose. - Ask for and obtain the explicit consent from end-users before processing any personal data. - Block all cookies and trackers from activation before the end-user has given their consent to which they will allow to operate on your site during their visit. - Document all obtained consents and renew consents at least once per year. - Enable users to be able to change their consent state or revoke their consent entirely in as easy a way as they gave it. If your website uses HubSpot to e.g. track user behavior on your website or detect when they open and read an email, these processes process personal data, to which users must first give their consent. Cookiebot CMP – and the Cookiebot CMP App in HubSpot – manages user consent through a simple and easy-to-understand consent platform that allows users to quickly get an overview of what cookies and trackers are in use, what kind of personal data they collect and whether they wish to allow their activation. By asking for and obtaining user consent prior to any activation of third-party cookies, you ensure that your website and its use of HubSpot is in full compliance with the General Data Protection Regulation (GDPR). --- ## Checklist: steps to make your use of HubSpot GDPR compliant Making your website’s use of HubSpot GDPR compliant is super simple – with the Cookiebot CMP App available in the HubSpot App Marketplace, GDPR compliance becomes a seamless integration into all HubSpot services. Cookiebot CMP helps your website live up to all GDPR requirements for personal data processing on websites. Important GDPR requirements to be aware of are – 1. Providing transparency about the data processing on your site in your privacy policy and / or cookie policy 2. Get user consent before processing data --- ## HubSpot and CCPA California Consumer Privacy Act (CCPA) took effect on January 1, 2020 and regulates how businesses are allowed to collect and sell the personal information of California residents. Unlike the European GDPR, the CCPA does not require websites to obtain the prior consent of users before they are allowed to collect, process or sell personal data. Instead, the CCPA empowers users with the rights to know what data has already been collected, demand it deleted and opt out of further data sales to third parties. Cookiebot CMP enables full CCPA compliance for your website as well as GDPR compliance. --- ## Frequently asked questions Is HubSpot GDPR compliant? HubSpot helps websites manage their inbound marketing. To do this, your website will use third-party analytics and marketing cookies from HubSpot that will process personal data from your users. The GDPR requires you to ask for and obtain the explicit consent of users before you’re allowed to do so. Is HubSpot CCPA compliant? The CCPA requires your website to inform users that you use HubSpot, what kinds of personal information you process and share with HubSpot and how they can opt out of having their data processed. How do my website use HubSpot in GDPR compliance? The most important thing is to ask for and obtain the consent of your end-users to process their personal data through cookies and trackers on your website and in emails. You also need to inform users through your cookie policy and privacy policy that you use HubSpot, what kind of personal data HubSpot’s third-party cookies process, how long they remain active and how they can revoke their consent to such processing activities. How do my website use HubSpot in CCPA compliance? You will need to inform users through your privacy policy that you use HubSpot, what kind of personal information HubSpot’s third-party cookies collect on your website, how they can gain access to collected data, have it deleted and opt out entirely of having personal information collected and shared with a third-party like HubSpot. --- ## Resources *Used by: HubSpot* · [Try Cookiebot CMP for free today](https://manage.cookiebot.com/en/signup/) · [Visit the Cookiebot CMP App in HubSpot for GDPR and CCPA compliance](https://ecosystem.hubspot.com/marketplace/apps/customer-success/data-management/cookiebot-220761/) · [Learn more about GDPR compliance](https://www.cookiebot.com/en/gdpr-cookies/) --- ## Product [Cookiebot™ Consent Solution](https://www.cookiebot.com/en/cookie-consent-solution/) · [Usercentrics for Wix](https://www.cookiebot.com/en/cookiebot-for-wix-by-usercentrics-app/) · [WordPress Plugin](https://www.cookiebot.com/en/new-wp-cookie-plugin/) · [Pricing](https://www.cookiebot.com/en/pricing/) ## Regulations [DMA (EU)](https://www.cookiebot.com/en/digital-markets-act-dma/) · [GDPR (EU)](https://www.cookiebot.com/en/gdpr/) · [CCPA (California)](https://www.cookiebot.com/en/what-is-ccpa/) · [VCDPA (Virginia)](https://www.cookiebot.com/en/virginia-vcdpa/) · [LGPD (Brazil)](https://www.cookiebot.com/en/lgpd/) · [TCF v2.3 (IAB)](https://www.cookiebot.com/en/tcf/) · [Google Consent Mode](https://www.cookiebot.com/en/cookiebot-cmp-google-consent-mode/) · [Microsoft UET Consent Mode](https://www.cookiebot.com/en/microsoft-consent-mode-cmp/) ## Partners [Become an affiliate](https://www.cookiebot.com/en/affiliates/) · [Become a partner](https://www.cookiebot.com/en/resellers/) · [Find a partner](https://www.cookiebot.com/en/cookiebot-reseller/) ## Resources [Blog](https://www.cookiebot.com/en/blog/) · [Digital Markets Act Hub](https://www.cookiebot.com/en/digital-markets-act-dma-resources/) · [Google Consent Mode Hub](https://www.cookiebot.com/en/google-consent-mode-resources/) · [Google Consent Mode V2 Certification](https://courses.usercentrics.com/course/google-consent-mode-v2) · [Google Consent Audit Fixes](https://www.cookiebot.com/en/google-consent-audit-fixes/) · [Developer documentation](https://www.cookiebot.com/en/developer/) · [Cookiebot vs CookieYes](https://www.cookiebot.com/en/cookiebot-best-cookieyes-alternative/) · [Cookiebot vs OneTrust](https://www.cookiebot.com/en/onetrust-alternative/) · [Cookie Banner Cost Calculator](https://www.cookiebot.com/en/cookie-banner-pricing-calculator/) ## Company [About us](https://www.cookiebot.com/en/about/) · [Careers](https://usercentrics.com/career/) · [Support](https://support.cookiebot.com/hc/en-us/) --- [Privacy Policy](https://www.cookiebot.com/en/privacy-policy/) · [Terms of Service](https://www.cookiebot.com/en/terms-of-service/) · [Cookie Declaration](https://www.cookiebot.com/en/cookie-declaration/) · [Data Processing Agreement](https://www.cookiebot.com/en/data-processing-agreement/) ©2026 Cookiebot™ by [Usercentrics](https://usercentrics.com/)