You don't need to comply with ESIGN because you did not e-deliver any documents.
As a security consideration, the customer has placed his/her personal financial information at great risk (unless the 1003 is encrypted.) Hopefully, your policy on acceptance of credit applications does not permit you to handle this as a credit application, AND hopefully none of your employees suggested that this is an acceptable way to submit an application.
_________________________
...gone fishing.