Create and embed web forms

Web forms turn website enquiries into contacts, leads and optional tasks in insideCRM. Saving a draft never changes the published form; Publish explicitly releases the new revision under the stable public link.

Quick start and examples

Open Management → Web forms and select Create form.
Start with Contact enquiry, Callback request, Property enquiry, or a blank form.
Adjust labels, button and success messages. The property example contains a property reference, contact details and a message.
Map names, email and phone to compatible CRM fields. Unmapped values remain visible in the submission.
Add a public HTTPS privacy-policy URL and review any optional consent wording.
Check desktop and mobile previews, confirm the legal review and publish.

Drafts, publishing and pausing

Every save creates an immutable draft revision while the published version remains live. Publishing switches the stable URL atomically. Pausing rejects new submissions; resuming restores the last published revision. Each submission retains its exact revision and consent wording. Raw values are redacted after the configured 30–730 day period.

Embed in WordPress

Open Embed, copy the iframe code and paste it into a WordPress Custom HTML block as an administrator. Test the page at desktop and mobile sizes before publishing. WordPress can remove iframe markup for users without unfiltered_html; use an administrator account or the public-link fallback in that case. The generic Embed block is not used, and no plugin or CORS configuration is required. See the WordPress Custom HTML block documentation for block and permission details.

Other websites

Paste the same iframe into an HTML, embed or code element in the CMS. Production sites must use HTTPS. If custom HTML is unavailable, use a normal link or button. The default height is 760 pixels and can be adjusted in the site editor.

Submissions, duplicates and safety

Submissions link to the generated lead. One exact, organisation-visible email match reuses the contact without overwriting it; multiple matches create a contact marked as a possible duplicate. Keep reCAPTCHA enabled, collect only required data, configure retention deliberately, and pause unused forms. Product checks support but do not replace legal review.

Troubleshooting

Form unavailable: check status, entitlement and published revision.
WordPress removed the iframe: use an administrator with unfiltered_html or the link fallback.
Form clipped: increase the iframe height.
Security check failed: check reCAPTCHA configuration and browser blockers.
Too many requests: wait for the rate limit and investigate repeated traffic for spam.