HubSpot Cookie Consent Integration: Complete GDPR Compliance Guide

## The €1.2 Million HubSpot Tracking Problem A B2B SaaS company discovered their HubSpot implementation had been tracking EU visitors without consent for 18 months. Every form submission, page view, and email click was logged to contact records—building detailed behavioral profiles before users ever agreed to analytics. Their HubSpot portal contained 47,000 contact records with enriched behavioral data. Under GDPR, that data was collected unlawfully. The company faced a choice: delete the behavioral data (destroying their lead scoring and marketing automation) or hope nobody complained. Someone complained. The investigation is ongoing. The lesson: HubSpot's powerful tracking is a liability without proper consent management. ## Why HubSpot Needs Special Consent Handling HubSpot isn't just analytics—it's a comprehensive tracking system that builds contact profiles from: - **Page views**: Every page a visitor views is logged - **Form submissions**: Creates and enriches contact records - **Email tracking**: Opens, clicks, and engagement patterns - **Chatbot interactions**: Conversation history and preferences - **CTA clicks**: Behavioral signals for lead scoring All of this constitutes personal data processing under GDPR. And HubSpot's tracking script fires immediately on page load by default. ## How GetCookies Integrates with HubSpot ### Automatic Tracking Control GetCookies integrates directly with HubSpot's tracking API: ```javascript // Before consent - tracking paused _hsq.push(['doNotTrack', { track: false }]); // After analytics consent - tracking enabled _hsq.push(['doNotTrack', { track: true }]); ``` This ensures no behavioral data is collected until users explicitly consent. ### Consent Events in HubSpot GetCookies triggers custom behavioral events that you can use in workflows: | Event | Description | Use Case | |-------|-------------|----------| | `pe_cookie_consent_shown` | Banner displayed | Track banner impressions | | `pe_cookie_consent_given` | User consented | Trigger welcome workflows | | `pe_cookie_consent_updated` | Preferences changed | Update lead scoring | | `pe_cookie_consent_withdrawn` | Consent revoked | Pause marketing automation | ### Installation on HubSpot CMS **Method 1: HubL Module (Recommended)** Create a custom module with your domain ID: ```html {% if module.domain_id %} {% endif %} ``` **Method 2: Site-wide Header** Add to your HubSpot site settings under **Settings > Website > Pages > Site Header HTML**: ```html ``` ## Consent-Aware Marketing Automation ### Lead Scoring Adjustments Create a workflow that adjusts lead scores based on consent: 1. **Trigger**: Contact property "consent_analytics" changes 2. **If analytics = true**: Add 10 points to lead score 3. **If analytics = false**: Remove behavioral scoring component ### Segmentation by Consent Create smart lists based on consent status: - **Full Consent List**: Contacts with analytics + marketing consent - **Email Only List**: Contacts with only necessary consent - **GPC Detected List**: Contacts with Global Privacy Control enabled ### Email Suppression Respect consent in your email campaigns: 1. Create a suppression list for contacts without marketing consent 2. Add this list to all marketing email exclusions 3. Allow transactional emails (order confirmations, etc.) regardless of marketing consent ## Global Privacy Control (GPC) Support GetCookies automatically detects GPC signals and: 1. Treats GPC as a "Reject All" preference 2. Notifies HubSpot via the tracking API 3. Logs a `pe_gpc_signal_detected` event 4. Shows an optional notice to users ## Multi-Language Support HubSpot multi-language sites work seamlessly: ```javascript window.getCookieConfig = { domainId: 'YOUR_DOMAIN_ID', hubspotIntegration: true, language: '{{ request.locale }}', // Auto-detect from HubSpot // OR specify explicitly: // language: 'de' }; ``` GetCookies supports 40+ languages including all HubSpot-supported locales. ## Cookie Declaration Page Add a cookie declaration to your privacy policy: ```html ``` This displays an auto-updating list of all cookies detected on your site. ## Common HubSpot Consent Mistakes ### 1. Not Blocking the Tracking Script HubSpot's tracking code fires on page load. Without GetCookies' `blockHubSpotTracking: true`, you're tracking before consent. ### 2. Ignoring Form Pre-fill HubSpot pre-fills forms based on cookies. If a user hasn't consented, this personalization shouldn't happen. ### 3. Email Tracking Without Consent HubSpot tracks email opens via pixel. For marketing emails to EU recipients, ensure marketing consent before sending. ### 4. Chatbot Data Collection HubSpot Conversations collects data from chat interactions. Gate chatbot loading behind consent if you're using it for marketing purposes. ## Verification Checklist After implementation, verify: - [ ] HubSpot tracking doesn't fire before consent banner appears - [ ] Console shows `doNotTrack: false` before user interaction - [ ] Console shows `doNotTrack: true` after analytics consent - [ ] Contact records show consent properties populated - [ ] Workflows trigger on consent events - [ ] GPC signal is respected when browser has it enabled ## Getting Started 1. **Create a GetCookies account** at getcookies.co 2. **Add your HubSpot domain** in the dashboard 3. **Install the widget** using one of the methods above 4. **Configure consent categories** to match your HubSpot usage 5. **Test thoroughly** before going live Your HubSpot marketing can remain powerful—it just needs to wait for permission first.