Lead form consent is a legal question, so let us be clear at the top: the rules governing calls and texts to US consumers are a legal matter, they change, and they are litigated actively. Nothing here is legal advice, and any agency that tells you otherwise is a risk to your business rather than an asset.
What we can usefully say is this: we build a lot of US lead forms, and the ones that survive contact with a compliance review have the same structural features. Those features are worth knowing before you brief anyone.
Lead form consent has to be visible
Hiding consent wording behind a link, in grey four-point type, or below the fold, is both a legal exposure and — separately — bad practice. If a reasonable person would not notice it, treat it as not there.
Visible does not mean ugly. A single clearly readable line immediately above the submit button, in the same type size as the rest of the form’s small print, is normal and does not meaningfully hurt conversion rate. We have tested this; the drop is far smaller than people fear.
Consent should be specific about who
A disclosure that says a consumer agrees to be contacted by "our partners" is the kind of vague wording that attracts attention. Name the business doing the contacting. If the lead is genuinely being shared, that is a different and much more complicated conversation to have with your lawyer before you run anything.
Pre-ticked boxes are a bad idea everywhere
Whatever jurisdiction you are in, a pre-ticked consent box is the weakest possible evidence that somebody agreed to anything. If consent is being collected by checkbox, it starts unticked.
Store the evidence with the lead
This is the part marketing teams skip and the part that matters most if anything is ever questioned. With every lead record, store:
- The exact disclosure text as it appeared at the time
- Timestamp
- The page URL the form was submitted from
- Whatever identifier your form platform captures
Disclosure wording changes over time. A record saying "consent given" with no copy of what was consented to is worth very little.
The question is never "did we have consent". It is "can we show what they saw".
Honour opt-outs properly
If somebody asks not to be contacted, that has to reach the systems doing the contacting — the CRM, the dialler, the SMS platform, and any list you upload to an ad platform. A suppression that exists in one system and not the others is the common failure, and it is usually discovered the embarrassing way.
Instant forms versus your own landing page
Native lead forms on Meta and Google prefill from the profile and convert at high rates. They also give you less control over how the disclosure is presented and less room to qualify. For US lead generation where the leads will be called, we generally prefer our own page: better control of the wording, better qualification, and a record we hold rather than one we export.
The trade-off is volume. Expect a higher cost per lead and a better hit rate — which is usually the correct trade, but it is a trade, and someone should decide it deliberately rather than by default.
What to do next
Get your own counsel to write the wording. Give them the form, the follow-up sequence, and an honest description of what will actually happen after submission — including the SMS sequence nobody mentioned. Then we build to what they give us and store the evidence alongside every lead.
If you want the rest of how we structure US lead generation, the US page covers the account side, and the lead funnel calculator is useful for seeing what tightening the form does to your numbers before you change it.
Questions people ask
Who should write the consent wording?
Your lawyer, not your agency and not a template found online. The rules on calls and texts to US consumers change and are actively litigated, so the wording is a legal document that happens to sit on a form.
Can the disclosure go in the privacy policy?
No. It has to be visible at the point of submission, next to the button, in readable type. A disclosure that requires a click to find is the single most common weakness in these forms.
Should the consent box be pre-ticked?
No. Pre-ticked boxes are a poor idea in every jurisdiction that regulates this, and they undermine the evidence that consent was given. An unticked box the user chooses to tick is what you want on record.
What evidence should I keep?
The exact wording shown, the page URL, a timestamp, the IP address and what the user did, stored with the lead record itself. Consent you cannot produce later is, in practice, consent you did not obtain.