You can use these emails in the URL when trigger happens or save it in the database, this way you can protect this through privacy rules.
Also, since the form is public. Optimize your database and remove privacy rules from this form element e.g. try and give this form a unique id.