HubSpot · HubSpot Privacy Policy · View original document ↗

Third-Party Data Sharing for Advertising

Medium severity Medium confidence Explicitdocumentlanguage Rare · 8 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity HubSpot recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for HubSpot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The policy authorizes HubSpot to share user data with advertising vendors who use cookies, web beacons, and similar tracking technologies to deliver targeted advertisements on third-party websites and services.

This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision authorizes disclosure of user browsing and activity data to advertising technology vendors for cross-site targeting purposes, which may require evaluation under GDPR consent requirements and ePrivacy Directive guidance applicable to cookie-based tracking in EU member states.

Interpretive note: The precise scope of data shared with advertising vendors and whether that sharing constitutes a sale under CCPA or CPRA is not fully specified in the excerpted document text and may depend on the specific integrations in use.

Consumer impact (what this means for users)

Under this provision, HubSpot may share identifiers, browsing activity, and usage data with advertising vendors who use that data to serve targeted ads on other platforms, including through cookie and web beacon tracking mechanisms.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Access HubSpot's cookie settings tool on hubspot.com to manage advertising and tracking cookie preferences, or submit an opt-out request via HubSpot's privacy request form.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Strava Medium

We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...

See all platforms with this clause type →

Monitoring

HubSpot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share information about you with third-party vendors who assist us in delivering advertising to you on other websites and services. These vendors may use cookies, web beacons, and similar technologies to collect information about your use of our Services and other websites to provide you with targeted advertisements.

— Excerpt from HubSpot's HubSpot Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1. REGULATORY LANDSCAPE: This provision engages GDPR consent requirements, the ePrivacy Directive as implemented across EU member states, and the CCPA and CPRA provisions addressing sale and sharing of personal information for cross-context behavioral advertising. The FTC has enforcement authority in the US context. The Irish DPC is the lead EU supervisory authority for HubSpot's GDPR obligations. 2. GOVERNANCE EXPOSURE: High. Sharing data with advertising vendors for cross-site targeting is a practice subject to heightened regulatory scrutiny under GDPR and CPRA. Where this sharing constitutes a sale or sharing of personal information under CPRA, California residents must be offered an opt-out mechanism. 3. JURISDICTION FLAGS: EU and EEA users face the highest exposure, as cookie-based advertising tracking typically requires prior informed consent under GDPR and ePrivacy rules. California residents have opt-out rights under CPRA. Illinois and other state privacy law frameworks may also apply depending on data types involved. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations using HubSpot's marketing tools should assess whether tracking pixels or ad integrations embedded in HubSpot-powered pages involve sharing their customers' data with advertising vendors in ways that require additional consent or disclosure under their own privacy programs. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should audit HubSpot's cookie consent mechanisms to verify that advertising tracking does not activate prior to affirmative consent for EU users, and should confirm whether a Do Not Sell or Share opt-out is available and functional for California users.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over data sharing practices with advertising partners and cross-context behavioral advertising under consumer protection and privacy frameworks.
    File a complaint →

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
HubSpot Privacy Policy
Entity
HubSpot
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-012541
Document ID
CA-D-00208
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
658f3c0d5276314c83861e8a6d63cf646d152743f91342918596207ab1bce8a0
Analysis generated
May 20, 2026 22:36 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: HubSpot
Document: HubSpot Privacy Policy
Record ID: CA-P-012541
Captured: 2026-05-20 22:36:33 UTC
SHA-256: 658f3c0d5276314c…
URL: https://conductatlas.com/platform/hubspot/hubspot-privacy-policy/third-party-data-sharing-for-advertising/
Accessed: June 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does HubSpot's Third-Party Data Sharing for Advertising clause do?

This provision authorizes disclosure of user browsing and activity data to advertising technology vendors for cross-site targeting purposes, which may require evaluation under GDPR consent requirements and ePrivacy Directive guidance applicable to cookie-based tracking in EU member states.

How does this clause affect you?

Under this provision, HubSpot may share identifiers, browsing activity, and usage data with advertising vendors who use that data to serve targeted ads on other platforms, including through cookie and web beacon tracking mechanisms.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 8 platforms. See the full comparison.

Is ConductAtlas affiliated with HubSpot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.