How to be data compliant

A) We have a lot of regular bookers and a fairly good year-round occupancy rate, but my marketing person convinced me to send an email newsletter to our past customers, encouraging them to revisit. I got quite a strongly worded email from one of the contacts asking how I got their data and spouting a lot of facts about data compliance.