We're looking at making our signup form GDPR friendly along with sending users more timely, personalised marketing and account update emails. Asking if a user wants to receive all these different emails when they sign up is a bit of a chore for the user but, as I understand it, is necessary to comply with GDPR.
When researching other sites, I found the Airbnb signup form.. which seems to just ignore the GDPR - unless I've interpreted it incorrectly (I imagine they have a lot of lawyers, I am not a lawyer!)
- It's an Opt OUT checkbox
- It's bundling all their email and sms and whatever else they deem as "marketing messages" into a single checkbox.
If I were to follow their example, I imagine it'd be better for my business, but against the law!?