The contact form asks for a name, email address, subject and message. A real deployment would need a configured destination and a policy describing how those details are stored and used.