A double opt-in happens when someone submits a form, then receives an email containing a link they must click to confirm their submission. Only after that confirmation click is the respondent officially added to your list, rather than being added the moment they hit submit.
Why Double Opt-In Matters
Double opt-in gives you explicit confirmation of consent for whatever action the form submission triggers, and helps ensure you're only gathering data from genuine respondents rather than typos, bots, or someone entering another person's address by mistake. It's a commonly used tool for GDPR compliance, since it directly supports getting clear, active consent, though it's worth noting double opt-in itself is not a mandatory requirement of GDPR; it's simply one of the more effective ways to demonstrate genuine consent.
How to Enable It
- Open your form's settings and find the Privacy or Compliance section.
- Turn on Double Opt-In.
- Customise the confirmation email respondents receive, including the confirmation link they need to click.
Note: Double Opt-In requires an email address field to be included in the form, since that's where the confirmation email is sent.
Handling Opt-Outs
If a respondent doesn't confirm, or actively opts out, their submission is listed under Opted-Out Entries, and that same email address can't be resubmitted through that particular form again, effectively respecting their decision not to be added, in line with the "right to be forgotten" principle under GDPR.
Part of a Wider GDPR Toolkit
Double opt-in is one of several GDPR-supporting features in Zoho Forms, alongside marking fields as Personal (so they're treated with extra care and flagged before being shared with third-party integrations), field-level encryption, a Terms and Conditions field, and providing an edit link in submission emails so respondents can exercise their right to rectification themselves.
Important on consent: Any consent checkbox or field in your form cannot be pre-ticked. Each purpose and type of data processing needs to be stated individually, with the respondent actively checking a box for each, rather than one blanket consent statement covering everything.
Need help? 1 Cloud Consultants can help you configure Double Opt-In and the wider GDPR feature set in Zoho Forms, though we'd always recommend confirming your specific compliance obligations with legal counsel.
Book a discovery call with 1 Cloud Consultants.
Related Articles
Zoho CRM Webform Analytics
Webform Analytics, originally released in beta, is now a fully available feature that lets you track, analyse, and optimise the performance of your web forms in real time. What it tracks Number of visitors who viewed the page containing the form How ...
Zoho Forms: Email Notifications
Email Notifications in Zoho Forms send automated messages whenever a new form entry is received or an existing record is updated, whether that's alerting your own team or acknowledging the respondent themselves. Setting Up an Email Template Go to ...
Web Forms on Zoho CRM's Free Edition vs Paid Editions
No, web forms on the Free edition of Zoho CRM are not the same as on paid editions. The Free edition includes basic web-to-lead form capability, but with meaningfully more restrictions than any paid edition. What's generally more limited on Free A ...
Practical Use Case: Automating Customer Confirmations and Internal Alerts with Zoho Forms Email Notifications
Email notifications are one of the simplest ways to make a web form feel like part of a joined-up process. This article walks through a realistic scenario, a business enquiry form, and shows how two notifications working together can keep both your ...
Zoho Campaigns GDPR
Zoho Campaigns includes a set of built-in features specifically designed to help you comply with GDPR when running email marketing to EU-based subscribers. Double opt-in Anyone submitting their details through a sign-up form receives a confirmation ...