A practical UK guide to email marketing consent under GDPR and PECR: valid consent, the soft opt-in, bought lists, and what ICO fines actually punish.