If they want to, they can trace it.
You got their email address, name and phone number.

That is more than enough. Imho.