Understand privacy and consent while using HubSpot ads

Features of the HubSpot ads tool help you better engage with your contacts while maintaining their privacy.

Please note: while these features are in HubSpot, your legal team is the best resource to give you compliance advice for your specific situation.

Display your privacy policy banner before your pixel fires

When you install a pixel using HubSpot, it will be added to all pages with the HubSpot tracking code installed. If you've set up a privacy policy banner, visitors to these pages will also be prompted to confirm they accept your privacy and consent settings. If you require visitors to opt into cookie tracking, pixels will not use cookies until the visitor confirms their consent.

If you want to allow users to edit or revoke their consent, you will need to work with a developer to implement that functionality using the HubSpot Tracking Code API. Learn more about implementing additional consent status and cookie removal functions in the developers documentation.

Please note: you can only install one pixel per ad network through HubSpot. If you need to install multiple pixels per network, you can use the Google Tag Manager. Pixels installed through the Google Tag Manager will not be automatically prompted with a privacy policy banner.

Sync your contact list audiences with Google, Facebook, and LinkedIn (Marketing Hub Starter, Professional, and Enterprise only)

When you create contact list audiences in HubSpot, contacts from your lists are periodically synced to the corresponding ad network. The ad network then attempts to match these contacts to users on their network.

Encrypting data sent to Google, Facebook, and LinkedIn

Each ad network requires different data to match a HubSpot contact to a user on their network. HubSpot encrypts and sends a contact's properties to the associated ad network, but ad networks can only use encrypted contact properties for matching purposes. Ad networks cannot use the data that HubSpot sends to augment the info they have for the corresponding user on their network.

HubSpot will encrypt and send different contact properties based on each network's requirements. 

• Facebook: HubSpot encrypts and sends the following contact properties:
  
  • Email
  • First name
  • Last name
  • Phone number
  • City
  • State
  • Country
  • Zip code
• Google ads: HubSpot sends the following contact properties. All fields except for Zip code and Country code will be encrypted.
  
  • Email
  • First name
  • Last name
  • Phone number

• • City
  • State
  • Zip code
  • Country code

• LinkedIn: HubSpot encrypts and sends the following contact properties:
  • Email
  • First name
  • Last name
  • Company name
  • Job title
  • Country

Handling GDPR and CCPA deletion requests

When you perform a GDPR compliant delete of a contact, HubSpot also deletes that contact from any syncing contact list audiences. HubSpot also sends a request to delete that contact from any syncing contact list audiences on the ad network itself. Successful deletion is subject to the ad network being able to match the encrypted contact information to a user in the respective audiences. Since this process ensures that your ad campaigns do not target GDPR-deleted contacts, it will also ensure you stay CCPA-compliant.

Sync consent to contact field from your lead generation ads to HubSpot

You can add a consent to contact field to your Facebook and LinkedIn lead generation ads. Any consent fields from these ads will now sync over to HubSpot as a new contact property. These properties will be labeled with [Ad Network] Consent before the property name. You can use these properties to create a list of contacts who have given you consent to be contacted.

Add a consent field when creating a lead generation ad in HubSpot

To add a consent field when creating a new Facebook form or LinkedIn lead gen form in HubSpot:

• In your HubSpot account, navigate to Marketing > Ads.
• Click Create ad campaign, then select Lead generation.
  • Facebook: select  socialBlockFacebook Lead generation.
  • LinkedIn: select  socialBlockLinkedin Lead generation.
• Create a new form:
  
  • Facebook: under Facebook form, click the Select a Facebook form dropdown menu, then click Create a new Facebook form.
  • LinkedIn: under LinkedIn lead gen form, click the Select a LinkedIn form dropdown menu, then click Create a new LinkedIn form.
• In the Create form panel, under Notice and Consent, click the dropdown menu and select Ask for consent to communicate; submit for consent to process, Ask for consent to communicate and process, Legitimate interest, or Custom. Learn more about the different notice and consent options.

Add a consent field to a new form in Facebook

You can add a consent field when creating the lead ad in Facebook within the Create form step: