How to make hubspot script on wordpress GDPR compliant

[JohnSmith2314]

Hi All
we recently started to use a plugin for making our site GDPR compliant regarding storing cookies:
https://www.webtoffee.com/product/gdpr-cookie-consent/
and what this plugin does is that it blocks any third party script on the website that store cookie on website until user accepts the cookie consent. cookie consent will show as a sticky banner at the bottom of website when user visits our website for the first time.
the problem we encounter regarding hubspot is that we need whether user did not attempt to choose an option yet or rejects cookie consent permanently, we still be able to show the hubspot chatbox on the corner of the website. but based on what the mentioned plugin does, the chatbox will not be shown except the time user accepts the coonkie consent. so we had to make an exception for hubspot script in the cookie consent plugin so we will be able to show the chatbox no matter what. but this is not GDPR compliant because we allow storing hubspot cookies without pay attention to user will. we asked the cookie consent support and they said if we do not send the cookies data out of our website we can put them under necessary category and necessary category will always be loaded no matter what. I wanted to ask whether cookies are going to be sent to hubspot or not? because if they are sent to hubspot we can not put them under necessary category based on the rules. and in that case what is the solution?

thanks for your responses in advance

[trevordjones · Accepted solution]

Hi @JohnSmith2314 and thanks for the Tag @PamCotton !

I would not use the third party plugin and would instead use HubSpot's built-in GDPR functionality.

GDPR Functionality can be enabled in your HubSpot Portal by clicking the gear icon for settings, then clicking Privacy and consent in the left sidebar, then clicking the switch to Turnon GDPR Privacy Settings. As long as the Tracking code is installed on all pages of your WordPress website, you should see your GDPR the consent for cookies begin appearing on your website right away.

You'll probably also want to do some configuration of the GDPR settings once the feature set is enabled.  For instance you will want to determine if you will require Legal Basis for Communication or not, update your forms, etc.  HubSpot provides suggested language for your forms and cookie consent, but you will want to review that language with your attorney to be sure it is adequate for your situation.

[JohnSmith2314 · Accepted solution]

I provide the below code for anyone who want to do the same thing related to GDPR Cookie Consent Plugin.
first of all you should add the following css in your child theme -> customize -> custom css section or on style.css on your child theme:

#hs-eu-cookie-confirmation{
	display:none !important;
}
#hs-modal {
	display:none !important;
}

you should Turn on GDPR functionality in your HubSpot account .

then you should set up your default consent banner and display cookies by category.

also you should show consent banner for collect chat cookies before visitor starts a chat.
then you can add the following code with a plugin like WPCode to the footer of All website pages.

<script type="text/javascript" id="hubspotCookieConsentSync" >
	var _hsp = window._hsp = window._hsp || [];
	_hsp.push(['showBanner']);
	_hsp.push(['addPrivacyConsentListener', function(consent) {
            console.log(`hs-analytics: ${consent.categories.analytics}`); 
            console.log(`hs-advertisement: ${consent.categories.advertisement}`); 
            console.log(`hs-functionality: ${consent.categories.functionality}`); 
        }]);

	document.getElementById("wt-cli-reject-btn").addEventListener("click",function(){
		if(document.getElementById("hs-category-toggle-analytics").checked){
		    document.getElementById("hs-category-analytics").click();
		    document.querySelector("input#hs-category-toggle-analytics + span.slider").click();			
		}
		if(document.getElementById("hs-category-toggle-functionality").checked){
			document.getElementById("hs-category-functionality").click();
			document.querySelector("input#hs-category-toggle-functionality + span.slider").click();			
		}
		if(document.getElementById("hs-category-toggle-advertisement").checked){
			document.getElementById("hs-category-advertisement").click();
			document.querySelector("input#hs-category-toggle-advertisement + span.slider").click();			
		}
		
		document.getElementById("hs-modal-save-settings").click();
	});
	//----------------
	document.getElementById("wt-cli-accept-btn").addEventListener("click",function(){
		if(!document.getElementById("hs-category-toggle-analytics").checked){
		    document.getElementById("hs-category-analytics").click();
		    document.querySelector("input#hs-category-toggle-analytics + span.slider").click();			
		}
		if(!document.getElementById("hs-category-toggle-functionality").checked){
			document.getElementById("hs-category-functionality").click();
			document.querySelector("input#hs-category-toggle-functionality + span.slider").click();			
		}
		if(!document.getElementById("hs-category-toggle-advertisement").checked){
			document.getElementById("hs-category-advertisement").click();
			document.querySelector("input#hs-category-toggle-advertisement + span.slider").click();			
		}
		
		document.getElementById("hs-modal-save-settings").click();
	});
	document.getElementById("wt-cli-checkbox-analytics").addEventListener("change",function(){
		document.getElementById("hs-category-analytics").click();
		document.querySelector("input#hs-category-toggle-analytics + span.slider").click();	
	});
	//----------------
	document.getElementById("wt-cli-checkbox-functional").addEventListener("change",function(){
		document.getElementById("hs-category-functionality").click();
		document.querySelector("input#hs-category-toggle-functionality + span.slider").click();	
	});
	//----------------
	document.getElementById("wt-cli-checkbox-advertisement").addEventListener("change",function(){
		document.getElementById("hs-category-advertisement").click();
		document.querySelector("input#hs-category-toggle-advertisement + span.slider").click();	
	});
	//----------------
	document.getElementById("wt-cli-privacy-save-btn").addEventListener("click",function(){
		document.getElementById("hs-modal-save-settings").click();
	});
	
</script>
<!-- Start of HubSpot Embed Code -->
<script type="text/javascript" id="hs-script-loader" async defer src="//js.hs-scripts.com/xxxxxx.js"></script>
<!-- End of HubSpot Embed Code -->

don't forget to replace the hubspot embed code with your own.
How ever this solution works perefct in my case, this question came to my mind that is it necessary to use third party plugin? if the Hubspot Cookie Consent manages all the cookies in my site then I no longer need that plugin. but I am not quite sure that hubspot just manages the cookies that are set by itself or all the cookies on the website. if someone can help me with that I will appriciate that.

[trevordjones]

Hi Again @JohnSmith2314:

Here's a useful Community Discussion on the topic.  HubSpot will manage everything that is connected through your portal, which can include Google Ads, Facebook Ads, and LinkedIN ads connected through the ads account.

It would seem that there is a fairly elegant solution using Google Tag Manager (which many of my clients do) to manage your tags and only allow them to fire if the HubSpot GDPR consent is checked.

[PamCotton]

Hello @JohnSmith2314, thank you for posting in our Community!

I want to share this GDPR resources page here with more information about it. Please note that while these features live in HubSpot, your legal team is the best resource to give you compliance advice for your specific situation.

I want to invite our top experts to share their ideas. Hi, @trevordjones @Mike_Eastwood any recommendations for the @JohnSmith2314 matter?

Thank you,

Pam

[trevordjones · Accepted solution]

Hi @JohnSmith2314 and thanks for the Tag @PamCotton !

I would not use the third party plugin and would instead use HubSpot's built-in GDPR functionality.

GDPR Functionality can be enabled in your HubSpot Portal by clicking the gear icon for settings, then clicking Privacy and consent in the left sidebar, then clicking the switch to Turnon GDPR Privacy Settings. As long as the Tracking code is installed on all pages of your WordPress website, you should see your GDPR the consent for cookies begin appearing on your website right away.

You'll probably also want to do some configuration of the GDPR settings once the feature set is enabled.  For instance you will want to determine if you will require Legal Basis for Communication or not, update your forms, etc.  HubSpot provides suggested language for your forms and cookie consent, but you will want to review that language with your attorney to be sure it is adequate for your situation.