A GDPR checklist for HubSpot email preferences
Most email problems under privacy law come from three things: not being able to show why you emailed someone, making it hard to opt out, and ignoring a request. This checklist covers the HubSpot side. It is general information, not legal advice.
Before you send
- Every contact you email has a recorded legal basis.
- Forms say clearly what people are signing up for and link to your privacy policy.
- Imported lists come with a note on where the contacts came from and what they agreed to.
In every email
- A working unsubscribe link, easy to find.
- Your company name and a way to contact you.
- An unsubscribe link that works on a phone, without logging in.
Give people choices
- Offer a preferences page so people can pick topics.
- Keep "unsubscribe from everything" visible, not buried.
- Name your subscription types for what people receive, not for your teams.
When someone asks
- Opt-outs take effect straight away, not "within ten business days".
- Requests for a copy of their data or to be deleted have an owner and a deadline.
- You can show the history of what you did and when.
Every few months
- Review old, never-engaged contacts and remove those you can't justify keeping.
- Check that new forms and integrations record consent properly.
- Test your own unsubscribe link end to end.
Where HubSubs fits
HubSubs is part of Kikaye, a set of small HubSpot apps on one login. See what HubSubs does, or read the setup guide.