Important GDPR note:

Your web form that sends the email to the referred person can’t store their email under GDPR. Only after they give you permission can you actually store and use their information.