My only concern is with an email form is that someone could send a nasty message without knowing who actually sent it. Is there some sort of information tracked such as IP address or anything?

If not the option to email someone would have to be disabled. Since this is internal to our company tracking it down by IP would be fairly simple. Otherwise I might just provide the email address and let them use their own email system to send the person a message.

Dear Michael,

Please be informed, that unfortunately Spider Contacts does not track IP addresses. You can try using IP tracking or Spam blocking extension.
Thank you.