October 2, 2019

How to integrate Secure Privacy with Hubspot

This tutorial explains how to install Secure Privacy on a Hubspot website

What is Hubspot

HubSpot helps marketers manage all aspects of their inbound marketing, from SEO, blog posts, social media, marketing automation, personalization to segmentation.

Inbound marketing, in opposition to traditional or outbound marketing such as phone calls, direct mail and ads, is marketing by means of creating relevant content, that is search-friendly and attracts the customers to you.

How to make your Hubspot web pages GDPR complaint

Getting proper consent to the use of cookies from your visitors is a crucial part of rendering your website compliant with the GDPR. To be compliant, the consent has to be…

Obtained prior to the setting of the cookies on the user’s browser (strictly necessary cookies are excepted from this rule)
Given based on clear and specific information about what the consent is given to
Withdrawable. The user must have access to their settings and make changes to what cookies they want to accept and reject.
Kept as documentation that the consent has been given.

Installing Secure Privacy on Hubspot websites

To install Secure Privacy on Hubspot you can follow these simple steps

Navigate to your HubSpot website and open it in Edit mode

2. Go to Settings > Advanced options

3. Paste your Secure Privacy code to "Additional code snippets.

4. Click on Publish to save your changes.

NOTE: Hubspot injects some cookies into the webpages which are essential for the website to work. It is not possible to block those cookies or plugins. You can move these cookies or plugins to the Essential category inside our admin app.

To block other cookies and plugins on HubSpot pages. You can follow this guide: Block cookies with JavaScript Rewrite

Schedule a call to learn more

Global Privacy Control (GPC): How to Implement, Audit, and Enforce Compliance

A Californian user enables GPC in their browser on a Monday afternoon. They visit your site. Your website detects the GPC signal, renders an "Opt-Out Request Honored" badge in the page header, and creates a record in your consent management platform. The user goes about their day. Meanwhile, your Google Ads remarketing tag has fired, your analytics platform has captured a full behavioral session tied to a persistent identifier, and your data clean room has received an audience match request that includes the user's email address. Every downstream system that touches advertising data processed this user identically to one who had never sent a GPC signal at all.

May 13, 2026

California vs EU AI Regulations: What Global Companies Need to Know

A US-headquartered SaaS company deploys an AI-powered hiring tool to customers in Germany, France, and California. The tool screens job applicants, assigns scores, and surfaces a ranked shortlist for hiring managers. In the EU, this system is a high-risk AI application under Annex III of the EU AI Act, subject to technical documentation requirements, conformity assessment, registration in the EU AI database, continuous post-market monitoring, and human oversight controls — all of which must be in place by August 2, 2026, with the Digital Omnibus proposal potentially extending some obligations to late 2027. In California, the same tool is covered by three separate regulatory instruments: the CPPA's ADMT regulations requiring pre-use notices and opt-out rights, the CRC's employment automated-decision system regulations requiring anti-bias testing and four-year record retention, and potentially the CPPA's risk assessment requirements if it crosses the CCPA applicability threshold. There is no single point of reference that resolves all of these obligations simultaneously.

May 12, 2026

Consent Mode Conversion Loss: Why Tracking Breaks and How to Recover Attribution

A Google Ads account loses 90% of its measured conversions overnight. Campaigns are active. Clicks are arriving. The budget is spending. Nothing in the account structure changed. The root cause, discovered two days and significant diagnostic effort later: the consent banner was collecting user preferences correctly but never transmitting those preferences as Consent Mode signals to Google's tag infrastructure. Every EU user who accepted tracking was being processed as non-consenting by Google's systems. Forty percent of the attribution data was eventually recovered through behavioral modeling. The remaining 60% was gone permanently.

May 11, 2026