Free Course for AttorneysLaw Firm Website

Module 5 · Turn visitors into clients

The consultation request system

25 min

Everything so far has been about being found and being believed. This lesson is about what happens in the ninety seconds after someone decides to contact you — and it is the part of a law firm’s website where the whole profession is quietly terrible. By the end you will have a consultation request form, a thank-you page, an instant reply, click-to-call and self-booking, all wired up, all at $0 a month.

The gap, measured from both sides

You do not have to take a marketer’s word for any of this. Two unrelated organizations went and measured opposite halves of the same gap, and both published their method.

13 minMedian time a firm takes to answer a web formHennessey Digital, 2025 — 1,333 U.S. firms
25%Firms that answered in under five minutesSame study
33%Firms that replied to an emailed inquiry at allClio secret-shopper study, 2024 — 500 firms
18%Replies that gave next steps or any cost informationSame study

Hennessey Digital submitted an inquiry through the lead form on 1,333 U.S. law firm websites and timed the response. A quarter of firms answered inside five minutes; the median was thirteen minutes; and roughly a quarter never answered at all. Clio hired a research agency to contact 500 firms by phone and email: a third replied to the email, two in five answered the phone, and the phone number was effectively dead at nearly half of them.

On the consumer side, Martindale-Avvo’s 2024 survey of 2,357 people found that “slow to respond” is the single biggest reason someone rules a firm out — ahead of cost, ahead of bad reviews — and that around four in ten will wait a day or two at most before contacting someone else. That survey polled people who use legal directories, so it skews toward the actively-shopping end of the market; take the ranking seriously and the decimal points less so.

Put the two halves together and you get an unusually cheerful conclusion. The bar is on the floor. You do not need to out-market anyone. A solo who simply answers — reliably, within the hour — is already ahead of half the profession.

The bigger gap is not speed. It is substance.

Look again at that fourth number. Of the firms that did reply, fewer than one in five told the person what would happen next or what anything cost. A fast reply that says “thank you, someone will be in touch” is barely better than silence, because it answers neither of the two questions every single person actually has: what happens next, and what will this cost me.

That is a writing problem, not a staffing problem. It is the cheapest thing on this entire page to fix, and you fix it once, tonight, in the auto-reply below.

On the “respond in five minutes” statistic you have seen quoted

It comes from a 2007 MIT/InsideSales study of more than 15,000 business sales leads, and the multipliers attached to it get mangled and re-attributed all over the internet. The direction of the finding is not in dispute — the odds of ever reaching someone collapse within the first hour — but it was not a study of legal intake, and you do not need it. The two studies above are about your profession specifically, and they make the point better.

What you are building

Five pieces. Each one works on its own, so if you stop after the third you still have something better than most firms have.

1A tappable phone numberheader, sticky bar, bottom of every practice-area page
2One short intake formon /contact and at the foot of each practice-area page
3A real thank-you pageits own address, so you can count what works
4An instant auto-replythe machine answers in five seconds so you don't have to
5A booking linkthey pick a time while you're still in court

The order matters, and it is not the order most firms guess. For a small firm the ranking by value divided by effort looks like this:

RankHow they reach youWhat it costsWho uses it
1Tapping your phone number on a phoneNothingThe person who wants a lawyer right now. Highest intent there is
2A short formNothingThe person who will not say “bankruptcy” or “domestic violence” out loud to a stranger. This is the low-shame channel, and it is not optional
3Booking a time themselvesNothingThe person who wants it settled now and does not want to wait for a callback
4A downloadable guideNothingThe person who is months away from hiring anyone — the next lesson

The form — and the friendliest dangerous sentence in legal marketing

Nearly every law firm contact form in America says some version of “Tell us about your case.” It reads as warm and open. It is the single most dangerous line on the page.

Why that sentence is a problem

When you invite a stranger to describe their legal problem to you, they will do exactly that. They will type the affair, the drinking, the threat, the money — the real facts — into a box on your website. And that happens before you have checked whether you already act for the person on the other side of their matter.

Someone who tells you their problem while considering hiring you is owed things by you, whether or not you ever take the matter. In some situations it can stop you acting for the other side later. You can be conflicted out of a matter you wanted by a message you never asked for and did not read carefully.

Module 6 is where the formal answer lives — what your state actually requires and why. This lesson gives you the practical fix, which is a form that asks for less and warns at the right moment.

The fix has three parts, and none of them cost you a lead. Ask for a summary rather than the case. Ask for the other side’s names, so you can actually run a conflicts check. And put a short, plain warning directly above the box where someone is about to over-share — not in gray text in the footer where nobody has ever read it.

Nine questions and a checkbox. Field 6 is the one almost every firm leaves out and should not: you cannot run a conflicts check on a name you do not have.
#Field label — use these exact wordsRequiredThe small text underneath
1Your nameYes
2Phone numberYesThe fastest way for us to reach you.
3Email addressYesWe'll send a confirmation here right away.
4What do you need help with?YesA dropdown of your five to seven real practice areas, always ending in “Something else / not sure”
5Briefly, what's going on?YesA few sentences is plenty — please don't include confidential details yet (see below).
6Who else is involved? (other names)NoNames of the other people or companies involved. We need these to check for conflicts before we can advise you.
7Is there a deadline or court date we should know about?NoIf you know of one, tell us — it changes how fast we need to move.
8When is the best time to reach you?NoAnytime / Mornings / Afternoons / Evenings / Please email me instead of calling
9How did you hear about us?No
10The consent checkboxYesThe exact wording is below — it is doing real work
The two pieces of wording to paste in unchanged

Directly above field 5, in a visually distinct box:

Before you write: please keep it general. Don’t send confidential details, documents, or anything you’d only want a lawyer to see — not yet. Sending this form doesn’t make us your lawyers, and until we’ve checked for conflicts we can’t promise to keep what you send confidential.

The consent checkbox label, field 10:

I understand that sending this form does not create an attorney-client relationship, and I agree that [FIRM NAME] may contact me by phone, text, or email about my inquiry. Read the full disclaimer. — with those last four words linking to your /disclaimer page.

Short and where the person is actually looking beats long and buried. Do not let AI “improve the flow” of either one, and do not let anyone talk you into moving them to the bottom of the page.

Four things never go on a public intake form, whatever the practice area:

  • Social Security number, date of birth, driver’s license, account numbers. No first-contact form needs them, and holding them is a data-breach liability with nothing on the other side of the ledger.
  • Immigration status as a dropdown or a checkbox. Structured, stored, subpoena-able — and a sensitive category under California’s privacy law. Ask what the person is trying to accomplish, never what their status is.
  • Medical detail, diagnoses or treatment history. “Were you injured?” is a fit question. “List your injuries and treating physicians” belongs after engagement, not on a web page.
  • Anything asking them to admit a crime, and anything asking what the case is worth. “Have you been charged?” is a fit question. “What did you do?” is not a form field, and a number they type in is a number you will be measured against.
A honeypot, not a CAPTCHA

A CAPTCHA — the “click every traffic light” puzzle — obstructs real submissions, and the people it obstructs most are the ones on old phones in bad moments. Ask for a honeypot instead: an invisible field that bots fill in and humans never see. It is free, it is silent, and it is more than enough for a small firm’s spam volume. The prompt below does it for you.

Build the form and the disclaimer page

Build my intake form

Stage 4 — lead capture and intake. Follow your frontend-design, copywriting and
compliance-check skills, and build the intake form to the law-firm intake spec in
your skills. My details: [FIRM NAME], [CITY, STATE], phone [PHONE].

My practice-area dropdown options are: [LIST 5-7], plus "Something else / not sure".

Two pieces of wording are non-negotiable — use them exactly as written, do not
reword or shorten them:

Above the "Briefly, what's going on?" field, in a visually distinct box:
"Before you write: please keep it general. Don't send confidential details,
documents, or anything you'd only want a lawyer to see — not yet. Sending this form
doesn't make us your lawyers, and until we've checked for conflicts we can't promise
to keep what you send confidential."

The required consent checkbox label:
"I understand that sending this form does not create an attorney-client relationship,
and I agree that [FIRM NAME] may contact me by phone, text, or email about my
inquiry." with "Read the full disclaimer." linking to /disclaimer.

Also: a hidden honeypot field, no CAPTCHA, labels above fields never inside them,
inline validation that never clears what they typed, phone numbers accepted in any
format, and the button reading "Send my message". On success, send them to
/thank-you.

Then build /disclaimer as a real page, and a /privacy page that names in plain
English every outside service this website uses and what each one receives.

Finally, give me the same form in a four-field version — name, phone, email,
"Briefly, what's going on?" with a one-line version of the notice — for the bottom
of each practice-area page.
Your form is not a secure channel — say so, and mean it

Here is the part nearly every website course skips. A form on a self-built site cannot deliver email by itself; it hands the message to a small outside service that emails it to you. That service is free, it is not your firm, it has signed nothing, and how long it keeps a copy is its business, not yours.

That is exactly why the warning above the box matters, why the box is capped, and why you build a /privacy page that names the services by name. Document exchange happens after you are engaged, through a channel you control. Never invite a client to send you a document through the website, and never move that conversation into a chat widget either — those are for logistics, never for facts.

Wire it to your inbox

Web3Forms is the easiest option and, as of this writing, its free tier covers 250 messages a month — more than a solo practice will use. (Formspree is a fine alternative; its free tier allows 50 a month.) You will be copying a value from your screen into your project. Copy it from your screen, not from anything printed here.

  1. Go to web3forms.com and enter the email address where you want messages to land. Use a real firm address you check, not one you forward and forget.
  2. Check that inbox. You will receive an access key — a long string of letters, numbers and dashes. That key is the only thing that connects your form to your inbox.
  3. Copy the key and paste it into your chat with Claude: “Here is my Web3Forms access key: [PASTE]. Please wire both versions of my form to it and keep the key out of anything I would publish publicly.”
  4. Fill in your own form on the preview and press Send my message. Then go and look at your inbox. If the message is there, you are done. If it is not, check the spam folder before you change anything.

The thank-you page — seven things, in this order

Make it a real page at its own address, /thank-you, rather than a message that appears in place of the form. Two reasons: a distinct address is the simplest way there is to count how many people actually made contact, and nearly everyone who submits a form sees this page, which makes it the most-read piece of writing you own.

  • A calm confirmation: we have your message.
  • A specific promise you can keep — “by the end of the next business day.” Never “shortly” and never “as soon as possible.”
  • What happens next, in three steps. This is the piece almost nobody includes and the one the research says people most want.
  • A button to book a time immediately, high on the page.
  • A line telling them to check spam or promotions, and to add your address to their contacts.
  • Your phone number, big and tappable, for anyone who would rather just talk.
  • The download itself, right there on the page, if the form was for a guide (that is next lesson).

The auto-reply — where you beat four firms out of five

This email goes out five seconds after someone presses the button, and it is the whole speed-to-lead play for a solo. The machine responds instantly, so you do not have to. Which means the reply can be good rather than fast — you write it once, calmly, at a desk, and it works forever.

Always in it

  • Confirmation from a human voice — never “ticket #4471 created”.
  • The same response-time promise as the thank-you page. The same one.
  • What happens next, in the same three steps: conflicts check, a call, then a consultation if you are a fit.
  • How your fees work in general terms — flat fee, hourly, contingency. This alone puts you ahead of most of the profession.
  • The booking link.
  • What to have ready for the call: every name involved, any dates or deadlines, any documents they already have.
  • Your direct phone number, and a short plain notice that this email does not make you their lawyer.

Never in it

  • Any opinion about whether they have a case.
  • Any prediction about how it will turn out.
  • Any statement about deadlines that apply to THEIR matter.
  • Any reassurance that reads as advice — “don’t worry, you’re covered”.
  • Any dollar figure attached to their situation.

The right-hand column is not squeamishness. Casual impressions handed out before anyone is engaged are exactly what turns into a complaint later, on a bad day, from someone who felt let down. General information is generous. An opinion is a service you have not agreed to provide.

Build the thank-you page and the auto-reply

Now build the two things that happen after someone submits the form.

1. A /thank-you page at its own address — not a message on the contact page.
   In this order: a calm confirmation; the promise "[NAME] will personally get back
   to you by the end of the next business day" (do not write "shortly"); a section
   headed "What happens next" with exactly three numbered steps — we check for
   conflicts, we call you at the time you picked, and if we're the right fit we set
   up a full consultation and tell you exactly what it costs before you commit;
   a prominent button reading "Or book a time right now" linking to [BOOKING LINK];
   a line about checking the spam folder; and my phone number as a large tap-to-call
   link.

2. The automatic confirmation email that goes out the moment the form is submitted.
   Subject line: "We got your message — here's what happens next". Plain text, short
   enough to read on a lock screen, sounding like a person wrote it. Include the same
   promise, the same three steps, how my fees work in general terms ([DESCRIBE — e.g.
   "flat fee for most estate planning work, quoted before you commit"]), what to have
   ready for the call (every name involved, any deadlines, any documents they have),
   the booking link, my direct number, and a short plain closing notice that this
   email doesn't make me their lawyer and they shouldn't send confidential documents
   yet.

   It must NOT contain: any view on whether they have a case, any prediction of
   outcome, anything about deadlines that apply to their matter, any reassurance that
   reads as advice, or any dollar figure for their situation.

Then explain, as if I have never touched a domain setting in my life, what SPF, DKIM
and DMARC are and exactly what I need to change so this email doesn't land in spam.
SPF, DKIM and DMARC in one breath

Three settings that live with whoever you bought your domain name from. SPF is a list of which mail servers are allowed to send email that claims to be from your firm. DKIM is a signature proving a message really came from you and was not tampered with. DMARC tells the receiving mail server what to do if the first two fail.

You only have to care because of one specific failure: most form tools send your auto-reply from their own servers while the “from” line claims your firm’s domain. That mismatch is the number one reason an intake reply lands in spam. The easy fix is to send from your real business email account, where these are usually already set up. The thorough fix is to add the service’s values to your domain settings — and the service gives you the exact values to copy. Again: copy them from your screen, not from anywhere else.

The phone number is a call to action, not a footer detail

Ruler Analytics found that 56.3% of conversions on legal websites are phone calls. More than half of the people who ever contact a firm do it by tapping a number. That makes your phone number the most important button on the site.

Four ways firms break it without noticing:

  • The number is part of an image, so it cannot be tapped, copied, or read aloud by a screen reader.
  • It is plain text with no link behind it — tapping does nothing at all.
  • It only appears in the footer, four screens below where someone decided to call.
  • Two different numbers appear in different places, left over from something abandoned years ago.

Fix the phone number and add the sticky call bar

Make my phone number work properly everywhere.

1. Every phone number on the site becomes a real tel: link, written as +1 followed by
   the ten digits, with the human-readable version as the visible text.
2. Put it in the header on every page and at the bottom of every practice-area page.
3. On phones only (under about 768px), add a sticky bar fixed to the bottom of the
   screen with two actions: "Call now" as the primary, and my booking link as the
   secondary. About 60px tall, with safe-area padding so iPhones don't clip it, and
   add matching bottom padding to the page so the bar never covers my form's submit
   button.
4. Hide the sticky bar whenever someone is typing in a form field — otherwise it
   sits on top of the keyboard and the field they're filling in.
5. Never let any floating element cover the main button on a page.

Let them book you while you are in court

This is the highest-leverage thing in the module for a solo, and it is the one that takes you out of the critical path entirely. Instead of “submit a form and wait for a lawyer who is currently in a hearing,” the person picks a time on your calendar and it is settled. Cal.com’s free plan does everything you need here, as of this writing: unlimited appointment types, intake questions, a built-in reminder email, and it reads your real calendar so it never offers a time you are busy.

Add booking to the site

Add online booking. I'm using Cal.com and my booking link is [LINK].

1. Add a "Book a call" button to the site header, visible on mobile, styled as the
   secondary action so it doesn't compete with the phone number.
2. Create a /book page with the calendar embedded in the page itself — not a popup,
   not a redirect — with a short paragraph above it: "Pick any time that works. It's
   a [15/30]-minute call to hear what's going on and tell you whether I can help.
   There's no charge for it and no obligation."
3. Under the embed: "Prefer to talk sooner? Call [PHONE]."
4. Make sure it doesn't break on a phone.

Then walk me through setting up the booking event itself in Cal.com, as if I have
never used a scheduling tool, so that it: asks for their phone number and one line
about their situation; asks who else is involved so I can run a conflicts check
before the call; turns on the booking reminder email (custom-timed reminders are a paid
feature — the default one is fine); leaves buffer
time between calls; and only offers times I'm genuinely free based on my calendar.
Tell me what the screen should look like when each step is done right.
Ask for the other names on the booking form too

It is the same reason as on the intake form, and people skip it in both places. A conflicts check you run before the call is a two-minute administrative task. One you run after the call is a problem.

What success looks like — do this one properly

Do not tick this off by reading it. Pick up your phone, open your site on it, and go through the whole thing as a stranger would. This is the most valuable ten minutes in the course.

  1. On your phone, tap your phone number in the header. Your dialer should open with the right number in it. Do not press call.
  2. Scroll a practice-area page. The sticky bar should be there the whole way down and should never cover anything.
  3. Fill in your own form, with a made-up name so you can spot it later. Tap into the message box: the sticky bar should get out of the way. Read the warning above that box the way a frightened person would.
  4. Press Send my message. The thank-you page should load at its own address, with the three steps and a booking button.
  5. Watch your inbox. The notification should arrive with everything the person typed. The auto-reply should arrive at whatever address you used — check spam, then fix it if it landed there.
  6. Open the booking link and book yourself in. It should land on your real calendar and send you a confirmation.
  7. Read your own auto-reply as if you had just been served with something frightening. Does it tell you what happens next? Does it tell you how the money works? If either answer is no, rewrite it now, while you are annoyed.

When all seven pass, you have an intake system that answers in five seconds, costs nothing per month, and does the two things four firms out of five do not do.

If you get stuck

The form email went to spam. Expected, first time. Mark it “not spam,” then ask Claude: “my form email landed in spam — walk me through checking SPF and DKIM on my domain, one step at a time.” If your firm email is Google Workspace or Microsoft 365, sending from that account instead is usually the whole fix.

Nothing arrived at all. Nine times out of ten the access key is wrong or was pasted with a space on the end. Say: “the form submitted but no email arrived — please check the key and the form’s destination and tell me exactly what you find.”

The sticky bar covers your submit button. Say: “the sticky call bar is covering the bottom of my form on a phone — add page padding for it and hide it while a field is focused.”

You would rather not publish your number at all. Understandable for a home-based practice. Get a second number that forwards to your phone, and keep the form and the booking link as the main paths — but do not run a site with no phone number anywhere. Over half of all contact in this profession happens by phone.

More learning resources

Still want another angle? These are hand-picked and vetted to line up with this lesson — from creators and sites worth your time.