I used to do this kind of thing for work. Best practice is, before you sign anyone up for a list, even one they literally just clicked to subscribe to, you send them one email saying hey click this thing if you want our newsletter. Just so there’s never a misunderstanding. If they don’t click, you never send them anything else.