The addresses are in your inbox, not in your list
People write to you through the contact form. Some of them would like your newsletter too, and some only want an answer to one question. You copy a few addresses into Mailchimp by hand when you remember, and the rest stay in your inbox.
You cannot simply add everyone who wrote. A person who asked about delivery times did not agree to marketing email, and in the EU and the UK that agreement has to come first. So the form needs a way for people to say yes, and the connection to your list has to respect the answer.
Only add the people who said yes
The European Data Protection Board, which publishes the EU's guidance on the GDPR, is direct about checkboxes: "The use of pre-ticked opt-in boxes is invalid under the GDPR" (Guidelines 05/2020, paragraph 79). So the newsletter box starts unticked, and the person ticks it themselves.
It also has to be its own box. Sending the message or accepting your terms does not count as agreeing to marketing (paragraph 81). And do not make the box required: if nobody can ask you a question without joining your list, the yes means nothing.
You also have to be able to show that a person agreed (GDPR Article 7(1), paragraph 104 of the same guidelines). The submission with the ticked box is one record. A confirmation click in your email tool is a second one, which is one reason to keep double opt-in on.
A contact form with a newsletter checkbox
This is a normal contact form with one extra checkbox. The box is called newsletter and sends yes when ticked. An unticked checkbox sends nothing at all, so the field is simply missing from the submission. Replace the access key with the one from your Formgong dashboard.
<form action="https://formgong.com/submit" method="POST">
<input type="hidden" name="access_key" value="fk_your_access_key">
<label>First name <input type="text" name="first_name" autocomplete="given-name"></label>
<label>Email <input type="email" name="email" required autocomplete="email"></label>
<label>Message <textarea name="message" required></textarea></label>
<!-- Not ticked by default and not required. Only people who tick it go to your list. -->
<label>
<input type="checkbox" name="newsletter" value="yes">
Send me news and offers by email. I can unsubscribe at any time.
</label>
<button type="submit">Send</button>
</form>Pending or subscribed: double opt-in in Mailchimp
Mailchimp gives a contact one of several statuses. Two matter here:
- pending: Mailchimp sends the person a confirmation email. After they click the link, they become a subscribed contact. Until then they are not one.
- subscribed: the person is on the list at once, with no email to confirm.
Double opt-in also stops people signing up an address that is not theirs, which matters on a public form. If your Mailchimp audience uses double opt-in, send new people as pending. Mailchimp's own API guide warns that sending subscribed on such an audience "skips the confirmation email" (Mailchimp).
In Formgong, double opt-in is on by default for Mailchimp and Brevo, where the request itself can ask for it. Klaviyo, MailerLite and Kit keep it as a setting in your own account, and the settings panel tells you where to find it.
Exactly what Formgong sends to each service
We read the request code for each of the five services. For a person who ticked the box, this is what leaves Formgong, with your API key:
| Service | Request | Status of a new contact | Name fields | Double opt-in decided by |
|---|---|---|---|---|
| Mailchimp | PUT /3.0/lists/{audience}/members/{md5 of the email} | pending by default, or subscribed with double opt-in off. Sent as status_if_new, so it only applies to new people | FNAME, LNAME | The switch in Formgong, on by default |
| Klaviyo | POST /api/profile-import (only when there is a name), then POST /api/profile-subscription-bulk-create-jobs | Email marketing consent SUBSCRIBED, source "Formgong form" | first_name, last_name | The list's own Opt-in process setting |
| Brevo | POST /v3/contacts/doubleOptinConfirmation, or POST /v3/contacts with updateEnabled when double opt-in is off | Added to the list after the confirmation click (or at once with double opt-in off) | FIRSTNAME, LASTNAME | The switch in Formgong, on by default; needs a double opt-in template in Brevo |
| MailerLite | POST /api/subscribers with the group | No status sent | name, last_name | Your account's "Double opt-in for API and integrations" setting |
| Kit | POST /v4/subscribers, then /v4/forms/{id}/subscribers or /v4/tags/{id}/subscribers | inactive when you pick a Kit form, active when you pick a tag | first_name only | The Kit form's own setting; a tag never asks |
Only the email address and the name fields you map are sent. The message, a phone number and the checkbox itself stay in Formgong. A name goes only when the form has one, so an empty field never wipes a name the list already holds.
Formgong does not add Mailchimp tags or groups. In Kit you can pick a tag as the destination. If you need a Mailchimp tag per form, a webhook to Zapier, Make or n8n can do that step instead.
When the same person writes twice
Mailchimp has two ways to add a contact. A POST creates one and fails if the address is already in the audience. A PUT to the contact's own address adds or updates. The address in that URL is the MD5 hash of the lowercase email, so Alex@Example.com and alex@example.com are the same person.
Formgong uses the PUT, and the status goes in status_if_new, which Mailchimp applies only to people who are not on the list yet. So a person who writes three times is one contact. A confirmed contact is not asked to confirm again, and a person who unsubscribed stays unsubscribed even if they tick the box on a later message.
The other four services also get add-or-update calls, and they treat a returning person a little differently:
- MailerLite and Kit keep the status the person already has. Formgong sends MailerLite no status, and Kit's API says updating the state of an existing subscriber this way "is not supported".
- Brevo updates the name (
updateEnabled) and Formgong sends nothing about unsubscribes. - Klaviyo treats a new tick as a new sign-up: its subscribe API removes an earlier unsubscribe, or a spam report, from that profile (Klaviyo). If you connect Klaviyo yourself, check the profile first. Formgong does: before it subscribes anyone on Klaviyo, Brevo or Kit, it looks the person up, and skips them if they unsubscribed or are blocked. If the list uses double opt-in, a new person gets a confirmation email first.
Not every form service does it this way. Formspree's Mailchimp plugin says "Multiple submissions with the same email will be ignored", so a name sent the second time is not added (Formspree).
What happens when the box is not ticked
The message reaches you as usual, by email, Telegram or wherever the form sends it. Only the list step is left out.
Formgong decides when the submission arrives. The box counts as ticked when the field is there and its value is not empty, 0, no, false, off, none or unchecked. If it is not ticked, nothing is sent to your email service at all. The submission shows as Skipped, with the reason, on the Email lists panel and on the submission page. The rule is checked again just before sending, so if you change it in between, the new rule holds.
A few other submissions are never added, ticked or not:
- spam, and submissions held back until you release them;
- imported submissions;
- tests: the installation test, and any submission sent with your own account email;
- an address that is not valid, or a known misspelling of a big provider such as
gmial.com.
That third point catches people out. If you test the form with your own address, it will be skipped on purpose. Test with a second address.
For a form whose only job is signing people up, there is a second rule, Everyone who sends the form. Make the purpose clear next to the button, and keep the checkbox rule on contact and order forms.
When Mailchimp says no
A timeout, a server error or a rate limit is tried again, up to 5 times over about 43 minutes. An answer that says the request itself is wrong, such as a revoked key, a deleted list or an address the service refuses, is not retried. Either way the submission is marked Failed with the service's own words, and you get one alert by email or Telegram, at most once a day for that form. After you fix the cause, Retry delivery sends it again.
Connect a form in Formgong
- Add the checkbox to your form, as in the code above, and send one test with a second email address so Formgong sees the field.
- In the dashboard, open the form, then Settings → Email lists.
- Pick the service and paste an API key from that account. Formgong makes one request to check the key, then stores it encrypted and shows only its last four characters.
- Choose the list, the email field and, if you want names, the name fields. Kit keeps a first name only.
- Leave Only when this checkbox is ticked selected, type
newsletteras the field, and save. Formgong suggests the field from your recent submissions. - Press Check connection, then send a real test and look for the person in your list. With double opt-in they appear once they confirm.
One list per form. Where to find the key in each service is in the Email lists guide.
Which form services do this on a free plan
| Form service | Email lists it connects to | On the free plan | Consent checkbox | Double opt-in |
|---|---|---|---|---|
| Formgong | Mailchimp, Klaviyo, Brevo, MailerLite, Kit | Yes, every plan | Built in: adds only people who ticked the box you name (the default) | On by default for Mailchimp and Brevo; the list's own setting for the others |
| Formspree | Mailchimp, Klaviyo, Kit, MailerLite and others, as plugins | No, Professional and Business plans | Optional _optin checkbox | Not stated |
| Basin | Mailchimp | No, Growth plan and above | Not stated (you can map Mailchimp marketing permissions) | Follows the Mailchimp list's setting |
| Fillout | Mailchimp, Klaviyo, Brevo, for forms built in Fillout | Mailchimp is listed among the integrations on Free | Run the integration only when a condition is met | Not stated |
| Web3Forms | None built in; a webhook to Zapier | No, webhooks are a Pro feature | Up to you, in Zapier | Up to you, in Zapier |
| Forminit | None built in; Zapier or a webhook | No, Pro and higher | Up to you, in Zapier | Up to you, in Zapier |
Fillout is a form builder, so its integrations work on forms you build in Fillout, not on your own HTML form. On Basin's free plan the route is Zapier, and Web3Forms and Forminit send everything to email tools through Zapier or a webhook on a paid plan. A Zapier step to Mailchimp can do everything above, but the consent check, the status and the duplicate handling are then yours to set up.
Tell us what is missing
Do you need tags, a second list, or a service we did not cover? Write to support@formgong.com and tell us how you use your list. If a fact in the table above has changed, tell us too, and we will check it and correct this page.
What Formgong's free plan includes
- Build the form or bring your own. The form builder takes the colours and fonts from your site's address, with no sign-up; ready form templates copy into your account; AI writes the fields from one sentence. Any hand-written HTML form works too.
- Websites with the form already connected. 28 free website templates post to Formgong out of the box.
- 250 submissions a month on unlimited forms. Spam does not count. Once a year, a busy month keeps delivering on credit until the 7th instead of stopping.
- Everywhere you work. Email to up to 3 people at once, Telegram with Reply and Handled buttons, Google Sheets, Notion, and 3 signed webhooks for Slack, Discord, Zapier, Make or n8n.
- Emails to your customers in your business's name. Formgong sends them under your business name and replies come back to you, with no email service of your own to set up: a review request to every lead, a reminder a visitor asked for, and review emails after an order with your logo and colours. People who agree can also go straight into your Mailchimp, Klaviyo, Brevo, MailerLite or Kit list. An automatic reply to each visitor is on Pro.
- No captcha needed. A server-side spam filter, a honeypot, allowed domains and a block list; add your own Turnstile key if you want one.
- Files and voice. Visitors can attach files, or record a voice message that arrives transcribed.
- Made for AI-built sites. A hosted form page and a contact button; step-by-step guides for sites built with Lovable, Bolt, v0, Replit and Base44; an MCP server lets Cursor or Claude wire the form for you.
- See what the form does. Analytics for views, starts, conversion and where each lead came from, and an alert when a form goes quiet.
- One account for the rest. Customer reviews and an AI help chat that answers visitors from your own pages, with every message in one inbox. Data is stored in the EU.
Frequently asked questions
Can I send contact form submissions to Mailchimp without Zapier?
Yes, if your form service connects to Mailchimp itself. Formgong does on every plan; Formspree and Basin do on paid plans. Otherwise a webhook to Zapier or Make can add the contact.
Is a pre-ticked newsletter checkbox allowed?
Not for people in the EU. The European Data Protection Board says pre-ticked opt-in boxes are invalid under the GDPR. Leave the box unticked and add only the people who tick it.
Do I need double opt-in?
The GDPR does not name it, but you must be able to show that a person agreed, and a confirmation click is good proof. It also stops people signing up someone else's address. Mailchimp calls an unconfirmed contact pending.
What happens if the same person sends my form twice?
With an add-or-update call, such as Mailchimp's PUT to the member, they stay one contact. Formgong uses add-or-update calls for all five services. An existing person keeps their status in all five, and someone who unsubscribed stays unsubscribed: on Klaviyo, Brevo and Kit, Formgong checks before it subscribes anyone.
Does Formgong add tags in Mailchimp?
No. It sends the email address, the status for new people and the first and last name. In Kit you can choose a tag as the destination; for Mailchimp tags, use a webhook to Zapier, Make or n8n.
Sources and documentation
Official references for this guide: Mailchimp API: add or update list member, Mailchimp: add and update contacts (guide), Mailchimp: merge fields, Mailchimp: about double opt-in, EDPB Guidelines 05/2020 on consent, Formspree: Mailchimp plugin, Basin: Mailchimp integration, Fillout: connect your form to Mailchimp, Fillout pricing, Web3Forms: webhooks, Forminit docs, Klaviyo API: bulk subscribe profiles, Kit API: create a subscriber. Formgong Email lists guide, where data is stored.
Related guides
- Lovable form submissions to email and Telegram
- HTML contact form without a backend: a working example
- How to send website form submissions to Telegram
- Contact form not sending email? Check where it stops
- Managing website leads in Telegram without a CRM
- Form backend for Lovable, Bolt, v0, Cursor
- Telegram bot for a contact form: build or skip?
- GDPR form backend: 7 checks before you choose
- Lovable form not sending email? 6 fixes
- Netlify Forms not working? React and Bolt fixes
- Stop contact form spam without a CAPTCHA
- GitHub Pages contact form: a working setup
- Mailto Form in HTML: Why It Fails and What to Use
- HTML form to Google Sheets: 2 free methods
- Webflow form submission limit: what to do at 50
- Turnstile vs reCAPTCHA vs hCaptcha for forms
- Contact Form 7 and Elementor forms to Telegram
- Squarespace contact form not sending email?
- Shopify contact form: where do messages go?
- Google Form to Telegram: free Apps Script way
- Wix contact form not sending email? Fixes
- EU / GDPR Formspree alternatives compared
- HTML form action attribute explained
- How do HTML forms work? The HTTP request
- Types of Injection Attacks on Web Forms (2026)
- Indirect Prompt Injection in MCP
- MCP Rug Pull Attack: Detect Tool Changes
- Form without a backend: 7 ways that work
- Thank-you page after form submission (HTML)
- Indirect Prompt Injection Examples (2023–2026)
- Indirect Prompt Injection via Email
- What Is Tool Poisoning in MCP?
- WordPress contact form without a plugin
- Send email from frontend JavaScript
- How to Prevent Indirect Prompt Injection
- Honeypot Form Field: How to Add One That Works
- Contact Form with File Upload (HTML, No PHP)
- Angular contact form without a backend
- Send form submissions to Slack or Discord without Zapier
- Verify a form webhook signature (HMAC-SHA256)
- Contact forms that send nothing: 793 AI-built sites tested
- v0 contact form that actually sends: 3 ways
- How we tested AI-built contact forms, and 12 bugs we hit
- Cloudflare vs Netlify free plan: hosting that never pauses
- EmailJS 412 “Gmail_API: Invalid grant”: reconnect Gmail
- Resend “You can only send testing emails”: verify a domain
- Supabase Edge Function blocked by CORS policy: 3 causes
- Formspree “Form not found” and other errors: fixes
- Web3Forms errors: “Invalid access key” and 403 explained
- How to add customer reviews to your website for free
- Getform not working? “This form has been deleted” and more
- Next.js contact form not working? 6 errors, reproduced
- Webflow form not sending email? What to check, tested
- FormSubmit not working? “This form needs Activation” fix
- Contact form “TypeError: Failed to fetch”: causes and fixes
- WooCommerce product enquiry form
- Contact Form 7 vs WPForms
- Gravity Forms alternative free
- WordPress contact form block
- 535-5.7.8 Username and Password not accepted (Gmail)
- 535 5.7.3 Authentication unsuccessful: Office 365 SMTP
- Nodemailer “Missing credentials for "PLAIN"”: the fix
- Nodemailer “Greeting never received”: port 465 fix
- Nodemailer SSL “wrong version number”: the port fix
- Nodemailer “self-signed certificate in certificate chain”
- Nodemailer ECONNREFUSED 127.0.0.1:587: missing SMTP host
- SendGrid “authorization grant is invalid”: 401 fix
- Mailgun 401 Forbidden: why the API rejects your key
- “Edge Function returned a non-2xx status code”: the fix
- Next.js “Body exceeded 1 MB limit”: Server Action fix
- Unexpected token '<', "<!DOCTYPE "... is not valid JSON
- “TypeError: Body is unusable”: body has already been read
- Turnstile “timeout-or-duplicate” and other siteverify errors
- Turnstile vs hCaptcha vs reCAPTCHA: speed and size tested
- Judge.me reviews not showing on Shopify: how to fix it
- Judge.me review carousel not showing: how to fix it
- Yotpo reviews not showing on Shopify? Check the app embed
- Loox reviews not showing on product page: how to fix
- Shopify reviews not showing: what to check first
- How to show reviews on Shopify
- GDPR for website forms: what each type of form needs
- WooCommerce reviews not showing: how to fix it
- Stamped.io reviews not showing on Shopify: how to fix it
- Etsy reviews not showing: why and what to do
- Trustpilot widget not loading: how to fix TrustBox
- Yotpo problems in 2026: what merchants report
- Contact Form 7 “error trying to send your message” fix
- Elementor form “Your submission failed because of an error”
- Framer form not sending email or not working: what to check
- Carrd contact form not working: plans, spam and errors
- Google review link not working: what customers see and why
- tawk.to widget not showing on your website: causes and fixes
- How to add questions and answers to your product page
- “Failed to send a request to the Edge Function”: fixes
- Next.js “Failed to find Server Action”: what it means
- Brevo “unauthorized: Key not found” 401: the fix
- Amazon SES “Email address is not verified”: the fix
- Shopify contact form not working: how to fix it
- Judge.me alternative for WooCommerce after the 2025 shutdown
- Free WooCommerce review plugins compared on the free version
- WooCommerce review reminder emails without a paid plugin
- Add Voice Recording to a Website Form
- Contact Form 7 spam: how to stop it
- WPForms not sending email: how to fix it
- Contact form emails going to spam: how to fix it
- HTML form not submitting: how to fix it
- Contact form not working: how to find the fault
- Webflow form spam: how to stop it
- Website form to Notion: how to set it up
- Website form to WhatsApp: what works and what does not
- What 1-star reviews say about AI support chatbots
- Which free form backend gives you the most submissions?
- Elfsight reviews widget not showing? Check the view limit
- Next.js contact form backend vs Server Actions
- Review stars not showing in Google search results
- How to stop duplicate form submissions
- How to see which form leads came from ChatGPT
- What happens when a form webhook fails
- When to send a review request email after an order
- How to collect video testimonials for free
- How to migrate from Formspree without losing submissions
- How to get a Google review link for your business
- What is a headless form backend?
- Is it safe to put a form access key in your HTML?
- AI chatbot that answers only from your website
- Minified React error #441 in Next.js
- Squarespace product reviews after Judge.me
- Accessible contact form checklist for WCAG 2.2
- How to ask a client for a testimonial by email
- How to respond to negative reviews, with examples
- 429 Too Many Requests on a contact form
- MCP server for forms in Cursor and Claude
- Can you offer a discount for a review?
- Do EU stores have to say if reviews are verified?
- Webflow form backend options compared
- How to add review schema JSON-LD to a product page
- How to turn a customer review into an Instagram post
- How to make a QR code for Google reviews
- Live chat or chatbot for a small business website
- Why people abandon your contact form halfway
- Which form backend do AI assistants pick? 54 answers
- PHP mail() not sending email, even when it returns true
- What “Failed to fetch” means, tested in three browsers
- 405 Method Not Allowed when you submit a form
- Send a contact form to more than one email address
- What is review syndication, and who needs it?
- How to save HTML form data to a database
- NetworkError when attempting to fetch resource
- Send product reviews to Google Merchant Center
- PHPMailer not working on a live server
- AI review reply generator: does it help?
- React 19 contact form with useActionState
- Astro Actions or a form backend?
- Is no-reply@wixsiteautomations.com legit?
- Where to find the Judge.me review widget code
- AI review summaries: what shoppers actually see
- Photo reviews for WooCommerce, and the GPS inside them
- Review request email templates you can copy
- Reviews in AI search: what ChatGPT and Perplexity cite
- Lead capture form with UTM tracking, built and tested
- Form design best practices, with our own form data
- Client intake form template with file upload
- What is social proof? Meaning and examples
- What is user-generated content (UGC)?
- Benefits of negative reviews for your store
- How to get your first reviews as a new store
- How to use customer reviews in your marketing
- How to get more customer reviews
- React form validation without a library, tested
- jQuery submit form with validation
- reCAPTCHA v3 setup with the server score check
- Shopify social proof that shoppers can check
- HTML file input: accept, multiple, capture and size checks
- How to add hCaptcha to a form, with the server check
- How to add invisible reCAPTCHA to a form
- Bug report form template with browser details
- What the FTC fake reviews rule bans for online stores
- How to show reviews on your homepage
- Do reviews increase sales? What the studies show
- HTML input types and what each one sends
- HTML textarea, tested in a real form
- HTML dropdown menu in a form, tested
- Do reviews help SEO? What Google says and shows
- How to add a review carousel people can read
- Product review examples that help shoppers decide
- Which trust badges actually mean something
- Customer satisfaction survey with CSAT and NPS
- JavaScript FormData and what fetch actually sends
- JavaScript form validation without a library
- Server-side form validation and what it catches
- Email validation in JavaScript, tested on 33 addresses
- Zod form validation with FormData, tested
- Store reviews vs product reviews
- How to send review requests through Klaviyo
- How to tag customer reviews by topic and mood
- Custom review form questions worth asking
- Online reputation management for small businesses
- HTML radio button groups and what they send
- HTML label tag and what screen readers hear
- HTML autocomplete attribute, tested with Chrome autofill
- HTML fieldset and legend, and what disabled leaves out
- HTML button tag and what a form button sends
- Vite contact form that still works after the build
- How to test a contact form, end to end
- How to embed a Google Form, and what it loads
- Customer feedback questions that get real answers
- How to convert a file to base64 in JavaScript
- FilePond with a form backend, and when to skip it
- Bootstrap form validation and server errors
- Tailwind form validation, tested in three browsers
- Donation form in HTML, and where the payment goes
- How to ask for a review in person or by text
- Which review sites matter for your business
- What are customer reviews, and which kinds count
- Online review statistics, checked at the source
- Best review app for Shopify and WooCommerce
- Why Gmail sends your self-hosted mail to spam
- htmx contact form that sends to another domain
- AI form builders tested, from prompt to sent form
- Headless WordPress forms with Contact Form 7, tested
- React Hook Form watch vs useWatch, and what gets sent
- Elfsight widget not working? It vanishes when views run out
- Jotform not sending emails? Check Jotform's bounce list
- Typeform not working? A white box means a blocked script
- Positive review response examples that don't sound copied
- How to remove a Google review when you can't delete it
- Google reviews not showing up? 8 causes to check in order
- Is buying Google reviews illegal? Even a review swap counts
- Which reviews can you hide? A review moderation checklist
- Average star rating: what 4.8 from 5 reviews means
- Reviews on a product page: where and how many to show
- SaaS testimonials: 3 of 27 had a number in them
- Do reviews reduce returns? Not when they're too good
- Testimonial examples for business: what makes one believable
- Testimonial questions to ask clients, by type of business
- Testimonial page design: a page or a section?
- Testimonial advertising rules: what the FTC requires
- Form submission canceled because the form is not connected
- Input type date format dd/mm/yyyy: what you can change
- How to disable textarea resize, or allow only vertical
- How to prevent Enter from submitting a form
- form.submit() vs requestSubmit(): what submit() skips
- Custom HTML checkbox CSS that doesn't break required
- How to reset a form after submit, and what reset() keeps
- Input type number maxlength not working? What to use
- How to create an HTML form, step by step
- Best form builder: free plans and branding, checked
- Best WordPress contact form plugin: 10 free ones compared
- How to increase form conversion rate: start with the count
- Form backend vs form builder: which one do you need?
- WordPress contact form not sending email? 3 plugins tested
- Contact Form 7 webhook? Turning it on switched our email off
- Gravity Forms webhook: what it sends and the URLs it rejects