There are a few ways - the easiest is to click the ‘message’ button on someone’s user card (which appears when you click their avatar)
If you like, an admin can disable personal messages on your site by disabling the “enable personal messages” site setting