The GDPR shapes every lead form
The General Data Protection Regulation (GDPR) applies to businesses that offer goods or services to people in the EU, including businesses based outside Europe. A lead form needs a lawful basis for processing, a clear purpose and a privacy notice. A form that collects more data than it needs adds risk without adding value.
For example, a quote form that asks for a date of birth and a home address before a first call collects data that the sales team does not use. Many visitors also leave a form that asks for too much.
Your form can ask only for the details needed for the first reply and explain how they are used. This works because a shorter form is easier to finish, and each field has a purpose you can explain under the GDPR. This note is general information, not legal advice.