OnWebPoint 
Table of Contents
A contact form sounds like one of the simpler parts of a WordPress website. In practice, it is one of the most consequential — a form that emails go to spam costs you real enquiries, a GDPR non-compliant data collection leaves you exposed to the Data Protection Commission, and a spam-flooded inbox wastes your time every morning. Irish businesses have specific requirements around data handling, email deliverability from Irish hosting environments, and accessibility compliance that most generic “best contact form” roundups do not address. This guide covers what actually matters for Irish WordPress sites and which WordPress contact form plugin to use for which situation.
WordPress Contact Form 7 — The Free Standard
WordPress Contact Form 7 is installed on over five million WordPress sites worldwide and has been actively maintained for over fifteen years. It is free, lightweight, and generates clean, accessible HTML output by default — which is important both for screen reader compatibility and for GDPR compliance, since accessible form markup makes it easier to associate consent notices correctly with form fields.
For a basic enquiry form — name, email, phone, message — CF7 is entirely adequate. Configuration is done through a template-based syntax that is slightly less intuitive than drag-and-drop builders but is well-documented and straightforward once learned. The plugin adds minimal overhead to page load times, which matters for the performance scores that affect search rankings.
The important limitation to know about: CF7 stores nothing in the WordPress database by default. Form submissions are sent by email only — which means if your notification email goes to spam or is lost, the submission is gone permanently. The Flamingo plugin (same developer, free, one-click install) adds database storage as a companion, creating an inbox inside WordPress where all submissions are saved regardless of what happens to the email. For any Irish business using CF7 seriously, Flamingo should be installed alongside it.
Spam protection: CF7’s out-of-the-box spam protection is minimal. Without additional configuration, high-traffic WordPress sites using CF7 typically receive significant spam volume through the form. The honeypot field option (available as a separate free plugin) is effective and invisible to real users. Akismet integration (requires an API key, free for non-commercial use) provides a second layer of filtering. Combining both stops the majority of spam without the friction of CAPTCHA.
Best for: Simple contact and enquiry forms on small business sites where performance and code cleanliness are priorities and you are willing to spend thirty minutes on initial configuration.
WPForms — The User-Friendly Paid Option
WPForms is the most beginner-friendly WordPress contact form plugin. Its drag-and-drop interface requires no template syntax knowledge — you build the form visually, which makes it accessible to non-technical business owners who need to add or change form fields themselves after launch. The Lite version (free) covers basic contact and newsletter forms adequately for many small sites.
The paid tiers add the features that make WPForms compelling for Irish businesses with more complex needs. Entry management stores every submission inside WordPress automatically, solving the lost-email problem without requiring a separate plugin. Conditional logic shows or hides fields based on previous answers — useful for enquiry forms that serve multiple service types from a single form. Email marketing integrations connect directly to Mailchimp, ActiveCampaign, and similar platforms, adding form submitters to your list without manual import. The Business plan (single site) is priced at approximately USD $199 per year, which positions it as a significant cost for a basic WordPress contact form but reasonable value if you are using the advanced features.
Best for: Businesses that want a form builder they can manage themselves without technical knowledge, and projects where entry management and email list integration are requirements rather than nice-to-haves.
Gravity Forms — The Developer’s Choice
Gravity Forms is the most powerful WordPress contact form plugin in the ecosystem. It handles multi-step forms with progress indicators, complex conditional logic (show field C if the answer to field B was X and the answer to field A was Y), file uploads with type and size validation, payment collection via Stripe and PayPal, calculation fields (build a quote calculator that updates in real time as users make selections), and integrations with virtually every CRM, helpdesk, email marketing platform, and payment gateway available.
Gravity Forms is used extensively for booking and appointment forms, professional services quote calculators, job application forms, multi-stage grant applications, and any form that needs to connect to an external system and do something more than send an email. The developer community around it is large and mature — most edge cases are covered by extensions either from the Gravity Forms team or from the community.
It is not free — licences start at approximately USD $59 per year for a single site — and the interface is less immediately intuitive than WPForms for simple forms. The overhead is worth it specifically when complexity is the requirement. For a standard WordPress contact form, Gravity Forms is using a sledgehammer on a nail. For a WooCommerce store that needs a custom product configurator submitted as an enquiry, or a professional services site that needs a booking form connected to a calendar system, Gravity Forms is frequently the right tool.
Best for: Complex forms with conditional logic, WooCommerce integrations, payment collection, booking flows, application processes, and any form that needs to trigger automations in external systems.
Fluent Forms — The Free Alternative That Competes
Fluent Forms has become the most credible free alternative to the paid options. Its free tier includes conditional logic, multi-step forms with progress bars, database entry storage, basic spam protection, and a form entry manager — features that require the paid tiers of WPForms. The interface is clean and drag-and-drop, making it accessible to non-technical users without sacrificing capability.
The paid version adds payment integrations (Stripe, PayPal), PDF generation from form submissions, advanced CRM connections, and priority support. At a lower price point than Gravity Forms or WPForms, it represents strong value for Irish businesses that need intermediate complexity. The trade-off relative to Gravity Forms is a smaller extension ecosystem and fewer advanced integration options — but for the majority of Irish business website use cases, Fluent Forms covers the requirements comfortably.
Best for: Businesses that need more than basic contact forms — conditional logic, multi-step flows, entry management — without the cost of premium alternatives.
Fixing WordPress Contact Form Email Deliverability
The most common WordPress contact form complaint from Irish businesses is not receiving submissions — not because the form is broken, but because the notification emails are being filtered as spam before they reach the inbox. This is a systemic problem that affects all WordPress installations using the default PHP mail function, and it is entirely fixable with a twenty-minute configuration change.
The root cause: WordPress sends notification emails using PHP’s mail() function, which dispatches emails from the web server’s IP address without proper SPF or DKIM authentication. Modern spam filters treat unauthenticated server mail with significant suspicion, and a meaningful proportion of WordPress form notifications end up in spam folders, particularly for Gmail, Outlook, and business email hosted on Microsoft 365.
The fix is to configure SMTP sending through an authenticated email service. Install the WP Mail SMTP plugin (free) and connect it to one of the following: your Google Workspace account (if your business uses Google email), Microsoft 365 SMTP (if you use Outlook), or a dedicated transactional email service like Postmark or SendGrid. Postmark is particularly well-suited to WordPress contact form because it optimises specifically for transactional email deliverability and provides detailed delivery logs that make troubleshooting easy.
Once SMTP is configured, test by submitting a form from a Gmail or Outlook address and confirming delivery to your inbox. Check the spam folder of the sending address to confirm no duplicate is landing there. This fix solves WordPress contact form deliverability permanently and should be implemented on every WordPress site before launch.
GDPR Compliance for Irish WordPress Contact Forms
Under GDPR as applied in Ireland, WordPress contact form data is personal data and must be handled with the same rigour as any other personal data you process. The specific requirements for a compliant Irish contact form:
Privacy notice at the point of collection: Include a visible statement near the submit button explaining how the data will be used: “By submitting this form you agree to our Privacy Policy. We will use your information to respond to your enquiry and will not share it with third parties.” This notice should be visible without scrolling from the submit button.
Data minimisation: Only collect fields you genuinely need to respond to the enquiry. If you do not need a phone number to send an initial reply, do not make it mandatory. Each field you collect must be justifiable under GDPR’s data minimisation principle. Optional fields are lower risk than mandatory ones.
Retention policy: If you use database storage (Flamingo, WPForms entries, Gravity Forms entries, Fluent Forms entries), you must define and enforce a retention policy. How long do you keep enquiry data before deleting it? Ninety days is a common standard for initial enquiry data. Configure automatic deletion in your form plugin’s settings, or set a calendar reminder to manually purge old entries quarterly.
Data subject access requests: If a past enquirer requests a copy of the personal data you hold about them (a GDPR right), you must be able to locate and provide it. If they request deletion, you must delete it across all systems where it appears: database, email, any CRM you exported it to. Document your process for handling these requests before you need it.
Spam Protection Without Breaking Usability
The instinct when facing high form spam volume is to add Google reCAPTCHA. Resist this instinct. reCAPTCHA v2 (the “I’m not a robot” checkbox) has measurable negative effects on form completion rates — real users find it frustrating, mobile users find it particularly problematic, and it adds a Google dependency with its own GDPR implications. reCAPTCHA v3 (which runs invisibly) has better completion rates but frequently produces false positives that block legitimate submissions.
The more effective and less disruptive approaches: a honeypot field (a hidden form field that bots fill in but humans do not — any submission with this field filled is automatically discarded), time-based validation (submissions completed too quickly are likely automated — a three-second minimum time flag catches the majority of bot submissions), and Akismet integration (the same service that filters WordPress comment spam, effective for form spam on higher-traffic sites). Combining honeypot and time-based validation eliminates the vast majority of WordPress form spam without any friction for real users.
Which WordPress Contact Form Plugin Should Irish Businesses Use?
For a basic enquiry form on a small business site: Contact Form 7 with Flamingo (for database storage), honeypot spam protection, and WP Mail SMTP configured with Postmark or Google Workspace. No cost, minimal page weight, GDPR-compliant with a privacy notice added.
For a business that wants drag-and-drop form editing without technical knowledge: Fluent Forms free tier covers most needs without cost. WPForms Lite is the alternative if you prefer its interface.
For anything complex — multi-step forms, quote calculators, booking flows, payment collection, or CRM integration: Gravity Forms. The licence cost is justified by the reliability and depth of the feature set for complex use cases.
Every WordPress site we build at OnWebPoint includes a GDPR-compliant WordPress contact form with SMTP delivery, spam protection, and database entry storage configured before launch. Get in touch to discuss your project →
