I would expect this is a GDPR compliance thing, moving to only opt-in for non-transactional contact (as is required). But that doesn't explain how or when it w

I would expect this is a GDPR compliance thing, moving to only opt-in for non-transactional contact (as is required). But that doesn't explain how or when it was set.