What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://app.hubspot.com/reports-dashboard/1316849', 'difficulty': 'EASY', 'action_type': 'DELETE_DATA', 'instructions': "California residents should visit HubSpot's privacy request portal and select the appropriate right (access, deletion, or opt-out of sale/sharing). Complete the online form with your identifying information.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'State_AG', 'reason': 'California AG and the California Privacy Protection Agency (CPPA) enforce CCPA/CPRA rights including opt-out of sale and deletion requests.', 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this California Residents' Rights (CCPA/CPRA) clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

California Residents' Rights (CCPA/CPRA) — HubSpot

Share 𝕏 Share in Share 🔒 PDF

What it is

California residents have the legal right to ask HubSpot what personal data it holds about them, to have it deleted, and to stop HubSpot from selling or sharing it with advertisers — and HubSpot cannot penalize you for exercising these rights.

Consumer impact (what this means for users)

California residents can request to know, delete, or opt out of the sale of their personal data held by HubSpot, and cannot be denied service or charged more for exercising these rights under CPRA.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

California residents should visit HubSpot's privacy request portal and select the appropriate right (access, deletion, or opt-out of sale/sharing). Complete the online form with your identifying information.

Cross-platform context

See how other platforms handle California Residents' Rights (CCPA/CPRA) and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

California law gives you some of the strongest privacy rights in the U.S., and this provision tells you those rights exist and that HubSpot must honor them.

View original clause language

If you are a California resident, you have certain rights regarding your personal information under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These rights include the right to know what personal information we collect, use, disclose, and sell, the right to request deletion of your personal information, the right to opt out of the sale or sharing of your personal information, and the right to non-discrimination for exercising your privacy rights.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: CCPA §1798.100 (right to know), §1798.105 (right to delete), §1798.120 (right to opt-out of sale), §1798.121 (right to limit use of sensitive personal information), §1798.125 (non-discrimination), and CPRA amendments effective January 1, 2023 including the right to correct (§1798.106) and expanded sharing opt-out. Enforcement is by the California Privacy Protection Agency (CPPA) and California AG. Civil penalties up to $7,500 per intentional violation. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

State AG

California AG and the California Privacy Protection Agency (CPPA) enforce CCPA/CPRA rights including opt-out of sale and deletion requests.
File a complaint →

Provision details

Document information

Document

HubSpot Privacy Policy

Entity

HubSpot

Document last updated

April 29, 2026

Tracking information

First tracked

April 18, 2026

Last verified

April 18, 2026

Record ID

CA-P-002978

Document ID

CA-D-00208

Evidence Provenance

Source URL

https://legal.hubspot.com/privacy-policy

Wayback Machine

View archived versions →

SHA-256

9086069c646a8fb26903326cd813947f9a89ebc0ea991c257cd0694abc31cafb

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: HubSpot | Document: HubSpot Privacy Policy | Record: CA-P-002978
Captured: 2026-04-18 11:21:28 UTC | SHA-256: 9086069c646a8fb2…
URL: https://conductatlas.com/platform/hubspot/hubspot-privacy-policy/california-residents-rights-ccpacpra/
Accessed: May 2, 2026

Classification

Severity

Medium

California Residents' Rights (CCPA/CPRA)