The policy states that individuals in the EEA, UK, and Switzerland have rights to access, rectification, erasure, restriction, objection, and portability of their personal data, and the right to lodge complaints with supervisory authorities.
This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision documents HubSpot's acknowledgment of GDPR and UK GDPR data subject rights and the supervisory authority complaint pathway, establishing the operational framework for EU and UK individuals to exercise rights in relation to HubSpot-controlled data.
Under this provision, EEA, UK, and Switzerland-based users may submit requests to access, correct, delete, or export their personal data, or object to certain processing activities, by contacting HubSpot's privacy team directly.
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...
Monitoring
HubSpot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have certain rights regarding your personal data, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. You may also have the right to lodge a complaint with your local supervisory authority.— Excerpt from HubSpot's HubSpot Privacy Policy
1. REGULATORY LANDSCAPE: This provision directly engages GDPR Articles 15 through 22, the UK GDPR equivalent provisions, and the Swiss Federal Act on Data Protection. The Irish DPC is HubSpot's EU lead supervisory authority; the ICO is the UK authority. Data subjects have the right to escalate unresolved complaints to these authorities. 2. GOVERNANCE EXPOSURE: Medium. The provision establishes rights acknowledgment but does not specify response timelines, identity verification procedures, or the process for handling complex or contested requests. Organizations should confirm HubSpot's operational procedures for responding to rights requests within GDPR's one-month timeframe. 3. JURISDICTION FLAGS: EEA and UK users have the most direct rights under this provision. The bifurcation between HubSpot as controller and processor (addressed in a separate provision) means that rights applicable to data held within HubSpot products on behalf of customers must be directed to those customers, not to HubSpot. 4. CONTRACT AND VENDOR IMPLICATIONS: B2B customers using HubSpot should ensure their own privacy programs include procedures for receiving and forwarding data subject rights requests that relate to data processed by HubSpot on their behalf, consistent with their GDPR controller obligations. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should confirm that HubSpot's rights request intake process is functional and responsive, and should document how rights requests are routed internally between HubSpot's controller and processor functions. Response timelines and identity verification procedures should be assessed against GDPR requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision documents HubSpot's acknowledgment of GDPR and UK GDPR data subject rights and the supervisory authority complaint pathway, establishing the operational framework for EU and UK individuals to exercise rights in relation to HubSpot-controlled data.
Under this provision, EEA, UK, and Switzerland-based users may submit requests to access, correct, delete, or export their personal data, or object to certain processing activities, by contacting HubSpot's privacy team directly.
ConductAtlas has identified this type of provision across 5 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.