I can’t find some answers to my GDPR/Opt-in questions and was looking for some guidance.
- If I enable the GDPR button does it affect everyone in my contacts list, every email, every form, etc? Even if we are mainly targeting US people?
- The Data Privacy and Consent - Is this the material that is activated? I’m not sure where each part will appear (besides the cookies).
- Double opt-in is separate from the above functionality? If you turn it on it starts adding it to form-created contacts, etc. Is this not required for GDPR for people that are not taken care of in the Data Privacy actions?
- If I turn on Double opt-in, can I use that for specific regions, or is it all or nothing?
Thank you.
Hi @TRichards,
Let’s go through these one by one.
@TRichards wrote:
- If I enable the GDPR button does it affect everyone in my contacts list, every email, every form, etc? Even if we are mainly targeting US people?
Yes, the GDPR options are either on or off, there aren’t any nuances. However, as you can see on this page, this won’t stop you from changing some of these defaults for some assets, see the bullet points at the end of this article: Turn on GDPR functionality in your HubSpot account
@TRichards wrote:
- The Data Privacy and Consent - Is this the material that is activated? I’m not sure where each part will appear (besides the cookies).
What exactly are you referring to here? The consent notice in website forms for example, including a link to your data privacy, does not have to do anything with the GDPR options. Those forms options are there regardless of the GDPR functionality and can be customized according to your requirements.
@TRichards wrote:
- Double opt-in is separate from the above functionality? If you turn it on it starts adding it to form-created contacts, etc. Is this not required for GDPR for people that are not taken care of in the Data Privacy actions?
Correct, two separate features and also two separate concepts. With the double opt-in, a contact is not eligible to receive email communication beffore confirming their email address. According to some (I’m not a legal expert and you should always consult one, when in doubt), a double opt-in is considered best practice but not explicitly requried under GDPR. Not sure what you’re referring to with “data privacy actions”, if this part is important to you, could you please elaborate?
@TRichards wrote:
- If I turn on Double opt-in, can I use that for specific regions, or is it all or nothing?
You can choose to enable it form some pages only:
There are also ways (using workflows in Marketing Hub Professional or Enterprise) to create your own double opt-in process and rules, which I would strongly recommend if you do have that option.
(My reply does not constitute legal advice.)
Let me know if you have any follow-up questions!
Karsten,
Thank you for the response. I still actually do have more questions, but it’s my fault I’m asking. I guess I wasn’t clear about which Data Privacy and Consent info I was talking about. I meant to talk about the Consent Options tab.
It is not clear how these legal paragraphs are used. They only are used after clicking on GDPR? Will they become options to drag and drop on emails and forms? Or do they just show up there? Which ones, where? Surely not every email will have Legitimate Interest, Privacy Policy, and Consent to Communicate text.
Or do I cut and paste the text and build my own text boxes to use? If so, what about the checkbox? What property does that link to?
And if I turn on GDPR are there instructions on sending to established contacts?
It’s not your fault, but the functionality seems very vague here.
Thank you!
Hi @TRichards,
These options will appear anywhere you process and store personal data for contacts – specifically they will appear as building blocks in HubSpot chatflows (Options tab in chatflow editor) and forms (left sidebar in the forms editor > Other form elements (Captcha, GDPR and more)).
Best regards!
