A plain-language guide to collecting, recording and honoring consent for email under GDPR — without killing your list growth.