How about a function for sending a direct message to a user through the website? It could be enabled by default, but users could disable it if they don't want to be contacted.

That way, users by default can be contacted, without giving away any personal information.