How to Integrate Salesforce with Your Website: A Complete UK B2B Guide
TL;DR: Leads contacted within 5 minutes are 21 times more likely to convert than those reached after 30 minutes, yet the average B2B company takes 47 hours to respond. Connecting Salesforce to your website eliminates that gap by routing leads to the right rep the moment a form is submitted. This guide covers the three main integration methods, how to choose between them, and what UK GDPR compliance looks like in practice.
Why Website-to-Salesforce Integration Matters for UK B2B
Your website is your highest-volume lead source, and right now it's probably disconnected from your sales process. A prospect fills in your contact form. It lands in a shared email inbox. Someone checks it, eventually, and forwards it to the right rep. By then, the prospect has already spoken to a competitor who called back within the hour.
Research from Harvard Business Review and InsideSales.com found that companies responding to leads within five minutes are 21 times more likely to qualify them compared to companies waiting 30 minutes. Yet 42% of businesses take longer than 24 hours to respond to an inbound enquiry.
Integrating Salesforce with your website eliminates that delay entirely. The moment a form is submitted, a Salesforce lead record is created, assigned to the right rep based on your routing rules, and a follow-up task is generated automatically. The rep gets a notification. The prospect gets an immediate acknowledgement. No inbox, no forwarding, no lost leads.
For UK B2B companies — where average deal values are high and buying committees take time to build — speed-to-lead is a genuine competitive advantage.
Method 1: Salesforce Web-to-Lead — The No-Code Starting Point
Web-to-Lead is Salesforce's built-in, zero-cost integration method, and for most UK B2B companies running a standard contact or enquiry form, it's the right place to start.
Here's how it works: Salesforce generates a snippet of HTML code from a form you configure inside your CRM. You paste that snippet into your website. When a visitor submits the form, the data posts directly to Salesforce and creates a Lead record — no developer required, no third-party subscription, no API credentials to manage.
In our experience, Web-to-Lead works well for companies running a single contact form or enquiry page, and it's often the right starting point even for businesses that will eventually need a more sophisticated API integration. Getting leads into Salesforce immediately — even with a basic setup — is more valuable than waiting six weeks for a perfect custom build.
What Web-to-Lead does well: Zero development cost, immediate lead creation, compatible with all major website platforms (WordPress, Webflow, HubSpot CMS, custom HTML), and it triggers assignment rules and auto-response emails automatically.
Key limitations: Limited to 500 submissions per day on most editions, no bi-directional sync, and minimal validation logic — spam protection needs to be added separately.
Method 2: REST API Integration — For Complex Requirements
When your website needs to do more than capture a simple form — user portals, quote calculators, e-commerce with account data, or real-time data lookups from Salesforce — you need the Salesforce REST API.
The REST API allows your website's backend to communicate with Salesforce bi-directionally: creating records, updating them, querying data, and triggering actions. A customer logging into your portal can see their open support cases. A quote configurator can pull product pricing live from your Salesforce Price Book. A B2B e-commerce site can sync order data back to Opportunity records without any manual entry.
This is the most powerful and flexible option, but it comes with development overhead. Your team needs to handle OAuth 2.0 authentication, endpoint design for each operation, error handling for API failures, and rate limit monitoring. Salesforce API limits range from 15,000 to over 100,000 calls per day depending on your edition.
For a deep dive into the architecture decisions involved, see our guide on Salesforce implementation for UK B2B companies.
Method 3: Third-Party Connectors — Zapier and Make
If you want something more capable than Web-to-Lead but aren't ready for a custom API build, third-party connectors sit neatly in the middle. Platforms like Zapier and Make (formerly Integromat) offer pre-built Salesforce connections you configure visually — no code required.
A typical Zapier workflow: "When a form is submitted on Typeform → create or update a Lead in Salesforce → add a tag in Mailchimp → send a Slack notification to the sales channel." All built in a drag-and-drop interface in about 20 minutes.
Connectors work well for teams without a developer, or where dev resource is constrained, and they're ideal for rapid prototyping. The main limitation to plan around: monthly task limits. Zapier's paid plans cap at 2,000–50,000 tasks per month, and hitting that ceiling mid-campaign means lost leads with no alert. At scale, connector subscription costs can also exceed the one-time cost of a direct API integration.
Which Integration Method Should You Choose?
The right method depends on your technical resources, data complexity, and volume expectations. Use this as a starting framework:
| Method | Best For | Technical Effort | Bi-Directional | Monthly Cost |
|---|---|---|---|---|
| Web-to-Lead | Simple forms, fast start, no dev | None | No | Free |
| Third-Party Connector | Mid-complexity, no dev available | Low | Limited | £50–£400/mo |
| REST API | Complex data, portals, high volume | High | Yes | Dev cost (one-off) |
Our recommendation for most UK B2B companies: start with Web-to-Lead to get leads flowing into Salesforce immediately, then layer in a connector or custom API integration once you understand exactly which data flows you need.
Step-by-Step: Setting Up Your First Salesforce Web-to-Lead Form
Here's the exact process to go from zero to live in under a week.
Step 1: Define your lead fields. Decide which fields you need to capture. Keep it minimal — each additional form field reduces conversion rate. For most B2B enquiry forms, First Name, Last Name, Company, Email, Phone, and a free-text "How can we help?" field is sufficient.
Step 2: Create the form in Salesforce. Navigate to Setup → Feature Settings → Marketing → Web-to-Lead. Enable Web-to-Lead, select your fields, set a return URL (the thank-you page), and click Generate. Salesforce creates the HTML.
Step 3: Add spam protection. The generated form is public-facing — bots will find it. Add reCAPTCHA v3 (invisible, no user friction) or a honeypot field (a hidden field bots populate but real users don't) before embedding.
Step 4: Embed and test. Paste the HTML into your website, apply your CSS, and add spam protection. Submit a test lead and verify the record appears in Salesforce within 30 seconds.
Step 5: Configure lead assignment rules. In Salesforce, set up assignment rules so leads route automatically based on geography, industry, or company size. An unassigned lead is a delayed lead. Contact our Salesforce consulting team if you need help structuring assignment logic for your sales territory model.
Step 6: Set up auto-response and follow-up tasks. Configure an acknowledgement email that fires the moment a lead is created. Use Salesforce Flow to automatically create a follow-up task for the assigned rep, due within your target response window.
GDPR Compliance — What UK B2B Companies Must Get Right
Under UK GDPR, collecting personal data via a website form is a processing activity that requires a documented lawful basis. For marketing follow-up, that lawful basis is almost always consent — and the ICO has specific requirements for what valid consent looks like.
According to ICO guidance, valid consent must be freely given, specific, informed, and unambiguous — given by a clear affirmative action, not a pre-ticked box. ICO fines for PECR breaches can reach £500,000, while UK GDPR violations can reach £17.5 million or 4% of global annual turnover.
In practice, your Salesforce integration needs to do more than capture name and email. It must capture and store the consent record:
- Consent checkbox on the form — A separate, un-ticked checkbox with specific language about who will contact them and how
- Map consent to a Salesforce field — Create a custom checkbox field (e.g.,
Marketing_Consent__c) on the Lead object. Map the form checkbox to this field. - Gate all automated outreach on consent — Every Salesforce Flow or email automation must check
Marketing_Consent__c = truebefore firing. If false or null, the automation stops. - Record the consent timestamp — Use a custom DateTime field (
Consent_Date__c) populated automatically via Flow when the Lead is created - Make withdrawal easy — Every automated email must include a one-click unsubscribe that sets
Marketing_Consent__c = falsein Salesforce immediately
Common Integration Challenges and How to Solve Them
Field mapping errors causing failed lead creation. If a required Salesforce field has no corresponding form field, the submission fails silently. Map every required field — including any your org has marked as required — before go-live. Test with submissions that leave optional fields blank.
Duplicate leads cluttering your pipeline. If a prospect fills in your form twice, Salesforce creates two Lead records. Configure Salesforce's duplicate matching rules to flag or block duplicates based on email address. Enable the standard "Leads" matching rule and set the duplicate rule to "Allow with alert."
Website performance impact. Web-to-Lead posts synchronously — the form waits for Salesforce to respond before the thank-you page loads. On a slow connection, this can feel sluggish. Use an asynchronous form submission (JavaScript Fetch API) so the page transitions immediately while data posts in the background. Our web development team can implement this in a few hours.
Spam flooding Salesforce with junk leads. Without protection, bots will submit thousands of fake leads. Implement reCAPTCHA v3 and add a Salesforce Flow validation step that checks for disposable email domains and suspiciously short company names.
Frequently Asked Questions
Can you integrate any website platform with Salesforce?
Yes. Salesforce Web-to-Lead works with any website that can include HTML — WordPress, Webflow, Shopify, Wix, custom-built sites, and everything in between. For REST API integrations, any website with a server-side backend (Node.js, PHP, Python, .NET) can connect to Salesforce using the standard OAuth 2.0 authentication flow. The platform your site is built on is rarely the limiting factor.
How long does a Salesforce website integration take?
A basic Web-to-Lead integration — form configured, spam protection added, assignment rules set up, and auto-response in place — typically takes one to two weeks including testing. A custom REST API integration for a user portal or bi-directional data sync usually takes four to eight weeks depending on complexity. Contact our Salesforce consulting team for an estimate on your specific project.
Is the integration GDPR compliant by default?
No. Salesforce Web-to-Lead captures and stores whatever data your form sends — but GDPR compliance depends on how you design the form and configure the downstream automation. You must capture explicit marketing consent, store it as a field in Salesforce, and gate all automated outreach on that consent flag. The ICO requires you to be able to demonstrate how and when consent was obtained for every contact in your database.
What spam protection should we use?
Google reCAPTCHA v3 is the most effective and least intrusive option for B2B forms — it runs invisibly in the background without presenting a puzzle to the user. Combine it with a honeypot field (a hidden form field that bots populate but real users don't) and Salesforce Flow validation rules that reject leads with disposable email domains. This combination blocks the vast majority of bot submissions without adding friction for genuine prospects.
What happens if the Salesforce integration goes down?
Web-to-Lead is hosted by Salesforce, so its availability is tied to Salesforce's platform uptime (historically 99.9%+). For API integrations, implement a queue-based fallback: if the Salesforce API call fails, store the submission temporarily and retry automatically every five minutes. Always have monitoring in place — a failed integration that nobody notices for 48 hours is 48 hours of lost leads.