Hello Max-
By far the most common cause of form submissions being caught by Spam filters is the lack of SMTP authentication.
By default, when WordPress sends email, it uses unauthenticated phpMail, which can appear like Spam to some email providers. Since you’re using WPForms, I’d recommend using the WP Mail SMTP plugin.
Once you’ve installed and activated the plugin, you set it up just like any email client so that it can access and send authenticated emails, either from your Hotmail account or from an email account you set up with your web hosting provider.