Yes, any PII that you obtain for a user for the express and sole purpose of something that the user asks of you (like a delivery address or a session cookie or

Yes, any PII that you obtain for a user for the express and sole purpose of something that the user asks of you (like a delivery address or a session cookie or a name to be printed on a business card) requires no further explicit approval if you are going to use it for something else, like sending a weekly brochure after the delivery you do have to ask permission for that additional action