Zoho CRM

Overview

Zoho CRM is a customer relationship management platform used by sales teams to manage leads, contacts, deals, and pipeline activity. On third-party websites, Zoho CRM appears through embedded web forms that capture lead information and feed it directly into the CRM system. These forms are a primary mechanism for connecting website traffic to sales workflows.

What This Script Does

Zoho CRM loads JavaScript from crm.zoho.com and Zoho CDN domains to render lead capture and contact forms on the host website. The scripts handle form display, field validation, and submission of contact data (name, email, phone, company, and custom fields) to Zoho CRM's API. Upon form submission, a new lead or contact record is created in the CRM. Beyond form handling, Zoho CRM's web tracking scripts set cookies to identify returning visitors and associate their browsing activity with existing CRM contact records. These cookies enable "visitor tracking" — recording which pages a known contact has viewed, how many times they have returned, and what content they engaged with. This behavioral data appears on the contact's CRM profile to inform sales outreach. Cookies include a persistent visitor identifier that can last for extended periods. Data is transmitted to crm.zoho.com endpoints.

Consent & Compliance

Zoho CRM spans marketing and functional categories. The lead capture form itself is a functional element that processes data provided directly by the user. However, the visitor tracking component — which sets persistent cookies to monitor browsing behavior and link it to CRM profiles — constitutes marketing-oriented processing that requires consent. Under GDPR and the ePrivacy Directive, the persistent visitor identifier and page-level tracking require explicit prior consent. The form submission itself requires a lawful basis (typically legitimate interest or consent) for the personal data collected. Under CCPA/CPRA, the behavioral tracking linked to identifiable contact profiles constitutes personal information processing that must be disclosed, and cross-product sharing within the Zoho ecosystem may trigger additional obligations.

Should You Block This Without Consent?

Conditional. The lead capture form can load without consent if it does not set tracking cookies prior to user interaction. However, the visitor tracking and behavioral profiling scripts that link browsing activity to CRM records must be blocked until marketing consent is obtained. Separate the form embed from the tracking script where possible.