Blank grid-paper notebook open on a wooden table, with a pencil beside it and a green plant at the edge

Lead gen forms

What privacy policy and consent checkboxes does a B2B Meta Instant Form need?

By The Tofu team ·

Add a privacy policy link (a web page, not a PDF), even though Meta's help pages disagree on whether it's required. Consent checkboxes are optional. Add them in the form's custom disclaimer with + Add new consent; each box is required unless you click Optional. You can't add a disclaimer to a form that's already running, so duplicate it. Meta's Lead Ad Terms make you responsible for the disclosures and consents the law needs. This page isn't legal advice.

As of November 2026.

This page sums up what Meta's help center and terms say. Meta's privacy policy article tells you to check your local laws on where and how to post your policy, so ask your privacy or legal team which notices and consents your forms need.

Before you start

  • A Page that has accepted Meta's Lead Ads Terms. Without that, the ad won't publish. See how to accept Meta's Lead Ads Terms.
  • A privacy policy on a normal web page. Meta says the link can't go straight to a PDF file, image or download. Your existing policy is fine: "You don't have to create a custom privacy policy for our lead ads."
  • Consent wording your legal team has reviewed. Meta says to have your legal team review your form questions, the Lead Ads Terms, the Business Tools Terms and the Advertising Standards before you build.
  • A plan for each consent. Know which CRM field or list each checkbox answer should land in.

What Meta requires and what's up to you

ItemWhat Meta says
Privacy policy linkMeta's pages conflict. "About lead ads with instant form" says "A privacy policy is required to run instant forms" under a heading marked "(Optional)". Its Ads Manager guides and its custom disclaimer article mark the link optional, and its requirements page only recommends one
Meta's own privacy noticeMeta's custom disclaimer article says yours goes "in addition to the Facebook privacy disclaimer"
Custom disclaimer and checkboxesOptional
A note on how you'll use the dataRecommended, in the Questions section
Disclosures and choices the law needsYour job. The Lead Ad Terms say each form must include "all disclosures and choice mechanisms necessary and sufficient to comply with applicable laws, rules and regulations"
Consent for uses beyond your offerYour job. The terms make you "responsible for obtaining consent as necessary"

Add the privacy link either way. The terms also hold you to any consents people gave, "including any privacy policy you link to."

Step 1: Check your privacy policy page

Meta suggests covering the data you collect and how you use it, whether you share it with affiliates or third parties, whether people can review or delete their data, how you respond to legal requests, how you tell people about changes, how to contact you, and the policy's effective date. It adds that "it's important that your privacy policy is accurate and honest." For B2B lead forms, check that the policy covers sales follow-up and any partner you share leads with, such as a webinar co-host.

Step 2: Say how you'll use the data

In the form's Questions section, Meta lets you "enter a message to explain how the information you collect will be used or shared." Its requirements page asks advertisers to tell people why they're collecting contact details and how they'll use or share them. Say it plainly, for example: "Our sales team will contact you to set up your demo."

Step 3: Add your privacy policy link

  1. In Ads Manager, choose Instant forms as the conversion location at the ad set level.
  2. At the ad level, click Create form, or pick an existing form.
  3. Complete Form type, Intro and Questions.
  4. In Privacy policy, enter your policy URL and the link text. Meta's API caps link text at 70 characters.

Meta says the form editor shows a red exclamation mark on any section that's incomplete. Fix those before you finish.

Step 4: Add a custom disclaimer and consent checkboxes

  1. Under Custom notices (one Meta guide calls this Custom disclaimer), click + Add custom disclaimer.
  2. Add a Title and Text, such as your consent statement.
  3. Click + Add new consent to add a checkbox, then type the statement next to it.
  4. To make that box optional, click Optional. Otherwise people must tick it: Meta says that when you add a disclaimer, "people are required to agree to submit the form."
  5. Click + Add new consent again for each extra box.
  6. Fill in the Ending section and click Create form.

Meta's examples for this section are "marketing opt-ins and legal disclaimers." It doesn't publish a limit on the number of boxes. In Meta's API, a checkbox is required unless you set it otherwise, and it starts unticked.

A required box stops anyone who won't tick it, so it can cut your lead volume. Which consents must be optional, and how to word them, is a question for your legal team. Meta's help doesn't answer it.

Step 5: Fix a form that's already running

You can't add a custom disclaimer to an Instant Form that's running in an ad. Duplicate the form, add the disclaimer to the copy, and switch your ads to it. See whether you can change a live Meta Instant Form.

Step 6: Get the consent answers into your CRM

Meta's developer docs say a lead's field_data "does not contain the responses to optional custom disclaimer check boxes." To read them, request the custom_disclaimer_responses field on each lead. It returns each box's checkbox_key and an is_checked value. Meta's help pages don't say whether the CSV download includes these answers: its list of download columns names your custom questions but not disclaimer checkboxes. Ask your connector's vendor, or check a real lead, before you rely on a consent field in your CRM. For the sync itself, see how to send Meta lead ads to HubSpot or Salesforce.

Step 7: Use the leads only as you said you would

  • Follow up on what you promised. Meta's requirements page says to message people only about the purpose you collected their details for.
  • Don't sell the data. "You may not sell Lead Generation Data under any circumstances." You can pass it on only so the recipient can fulfill the purpose people agreed to, and the terms say any sharing with a third party is "solely at your own risk."
  • Agencies: if you receive leads for a client, you may use or share them only on that client's behalf, and you can't mix them with other advertisers' data.

Meta's help center adds that for lead ads, "both Meta and the advertiser are data controllers."

Common problems

ProblemWhy it happensFix
The form won't finish without a privacy linkMeta's pages conflict on whether it's required, and one says it isAdd a web page URL, not a PDF or download
No way to add a disclaimer to a live formMeta doesn't allow it on a running formDuplicate the form, add it there and swap it into the ad
Optional consents missing in your CRMfield_data leaves out optional checkbox answersRequest custom_disclaimer_responses, or ask your connector's vendor
Fewer leads after adding a checkboxBoxes are required unless you mark them OptionalMake boxes optional where your legal team agrees
You can't find Custom disclaimerMeta's guides use both "Custom notices" and "Custom disclaimer"Look for + Add custom disclaimer after Privacy policy
The ad is rejected over termsThe Page hasn't accepted the Lead Ads TermsAccept them for that Page

Sources

Ask Tofu next

Pick a question and Tofu Ads Agent answers it in chat.

Related answers

More on

Let an agent build your next campaign.

Tofu Ads Agent reads your CRM, plans the funnel, builds the audience and creative, and stages full campaigns across LinkedIn, Google and Meta for your approval.

Try it free Get a demo