EU and UK users have the legal right to see, correct, delete, or move their personal data held by HubSpot, and can object to how HubSpot uses it.
This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes HubSpot's compliance obligations under GDPR by explicitly acknowledging enforceable individual rights and establishing a mechanism (contact process) through which data subjects may exercise those rights. The clause creates a procedural framework for handling data access, rectification, and deletion requests.
EU and UK residents can exercise six distinct GDPR rights over their HubSpot personal data, including deletion and portability, by contacting privacy@hubspot.com — and HubSpot is legally required to respond within one month.
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to access your personal information, the right to correct inaccurate data, the right to delete your data, the right to portability, the right to object to processing, and ...
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
Monitoring
HubSpot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are in the EEA or UK, you have certain data protection rights under GDPR. HubSpot aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your personal information. If you wish to be informed of what personal information we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights: the right to access, update or delete the information we have on you; the right of rectification; the right to object; the right of restriction; the right to data portability; and the right to withdraw consent.— Excerpt from HubSpot's HubSpot Privacy Policy
(1) REGULATORY FRAMEWORK: GDPR Art. 15 (right of access), Art. 16 (rectification), Art. 17 (erasure), Art. 18 (restriction), Art. 20 (portability), Art. 21 (objection), and Art. 77 (right to lodge a complaint). UK GDPR mirrors these provisions. Response deadline is one month, extendable by two months for complex requests with notification (Art. 12(3)). Enforcement by EU/EEA national DPAs and UK ICO; fines up to €20 million or 4% of global turnover for non-compliance. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision operationalizes HubSpot's compliance obligations under GDPR by explicitly acknowledging enforceable individual rights and establishing a mechanism (contact process) through which data subjects may exercise those rights. The clause creates a procedural framework for handling data access, rectification, and deletion requests.
EU and UK residents can exercise six distinct GDPR rights over their HubSpot personal data, including deletion and portability, by contacting privacy@hubspot.com — and HubSpot is legally required to respond within one month.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.