There is a particular kind of frustration that most people have felt without ever naming it: you find a business online, you want to ask them something, and the path from wanting to asking turns out to be unexpectedly long. You click the email link and your email app opens — the wrong account, a blank subject line, the quiet inconvenience of being moved somewhere you did not mean to go. Some people push through. Many do not. A contact form exists to close that gap entirely. The visitor writes a message, presses send, and something has happened. They stay on your site. You receive the message. Nothing more was required.
Why a Contact Form Beats a Plain Email Address
Showing your email address directly on your website is better than silence, but it carries costs that are easy to overlook:
- It requires your visitor to leave your site. Clicking a mailto: link opens their default email app, which may not be set up, may be on the wrong account, or may simply be unexpected. Many people will close the tab instead.
- It attracts spam. Automated bots crawl websites collecting email addresses to target with bulk spam. A contact form keeps your email hidden from the page source, so bots cannot find it.
- You lose control of the format. A contact form can ask for exactly the information you need — name, phone number, type of enquiry, project budget — before you even reply. A plain email gets you whatever the person decides to write, which is often not enough to help them efficiently.
- You can not track conversions. Website analytics can record when someone submits a contact form as a "conversion event" — a useful signal that your website is generating enquiries. With a plain email address you cannot measure this.
What Fields Should a Contact Form Have?
There is a temptation, once you have a contact form, to ask people everything you might ever want to know. Resist it. Every field you add is a small request for effort, and those requests accumulate. For most small businesses, three to four fields is the right number — enough to give you what you need, not so many that the person quietly closes the tab:
- Name. A first name is enough — you do not need their full name at this stage.
- Email address. Required so you can reply to them.
- Message. A free-text box where they describe what they need.
- Phone number (optional). Only add this if you genuinely call enquiries back — making it optional rather than required removes a barrier for people who prefer email.
Some businesses add a dropdown asking what type of enquiry it is — new project, general question, partnership, and so on. If you run several distinct services and need messages to reach different people, this earns its place. But for most solo operators and small teams, a simple three-field form does the job quietly and well. The goal is to make it easier to get in touch, not harder.
How to Add a Contact Form to Your Website
How you add a form depends on how your website is built. Four common cases, plainly described:
- Wix. Contact forms are built into Wix — drag the "Contact Form" widget onto any page. Messages go to your Wix inbox. No extra accounts or services needed.
- Squarespace. Add a Form Block to any page. Squarespace handles the email delivery and stores submissions in your account. You can connect it to a Google Sheet or email notification.
- WordPress. The most widely used free plugin is WPForms Lite. Install it, create a form, and paste a shortcode onto any page. WPForms sends submissions to your email address. Contact Form 7 is another popular free option.
- Custom or hand-coded website. A developer can use a third-party form handling service such as Formspree, Web3Forms, or Netlify Forms. These services receive the form submission and forward it to your email address. They are free for low volumes and do not require a server-side language. Typically this takes a developer less than an hour to set up.
What Happens When Someone Submits Your Form?
It is worth understanding what actually takes place behind the scenes when a visitor sends a message, because it explains why things occasionally go wrong — and what to check when they do. When a visitor submits a contact form, four things happen in quick succession:
- The form data is sent to a service (either your website platform, a plugin, or a third-party service like Formspree).
- That service sends the message to your email address, usually within a few seconds.
- The visitor sees a thank-you message on screen confirming their message was sent.
- You reply by email as normal — the visitor receives your reply directly in their inbox.
Some platforms also keep a record of submissions in a dashboard, which is quietly useful. Email inboxes get cluttered; a separate log of enquiries means you can search back through them without hunting through hundreds of threads.
Do Contact Forms Have to Comply With Privacy Rules?
Yes — and this is not as onerous as it sounds. Under UK GDPR, when you collect personal data through a contact form — and names and email addresses are personal data — you have three straightforward obligations:
- Your privacy policy must mention what personal data you collect and how you use it. A line explaining that contact form data is used to respond to enquiries and is not shared or sold is usually sufficient for a small business.
- You should only use the data for the purpose it was collected — replying to the enquiry. You should not add people to a mailing list from a contact form submission without their separate consent.
- Some businesses add a checkbox to their form saying something like "I agree to my data being used to respond to this enquiry." This is not strictly required for a basic contact form under UK law (legitimate interest applies to responding to direct enquiries), but adding it is good practice if you want to demonstrate clear consent.
If you are using a third-party service like Formspree to handle your form submissions, that service becomes what the law calls a data processor — it is processing personal data on your behalf. It is worth a quick check that the service is GDPR-compliant and that their servers are based in the UK or EU, or that they have a data processing agreement in place. Most reputable services make this easy to confirm.
How to Reduce Spam Through Your Contact Form
Contact forms can attract automated spam submissions, especially on WordPress sites where form plugins are well-known targets. Three measures help significantly and none of them require much effort:
- Use Google reCAPTCHA or hCaptcha. These are free tools that add a small verification step to your form — usually a checkbox saying "I am not a robot" — that stops most bots. Both Wix and Squarespace handle this automatically. For WordPress, WPForms has reCAPTCHA built in.
- Use a honeypot field. This is a hidden field that human visitors cannot see, but bots fill in automatically. Any submission with the honeypot field completed is discarded. Many form plugins offer this as a built-in option.
- Keep the form off your homepage if spam is a major issue. A dedicated contact page is slightly less exposed than a form embedded on the front page.