I've been given form code for posting to a CRM to process, but the client wants reCAPTCHA included. Am I right in thinking that the reCAPTCHA form validation needs to be handled at the server side processing end? It can't be validated separately end then sent to process can it?

That’s correct. And the client needs the appropriate Google credentials to add recaptcha.

Cheers, that's what I thought