Are abandoned cart email campaigns GDPR compliant?

As an e-commerce store owner, abandoned cart recovery is a critical strategy for recouping potential lost sales. But lately, I've been increasingly worried about GDPR compliance. We're collecting customer emails during the checkout process, and I want to ensure our abandoned cart campaigns don't accidentally breach data protection regulations. I've heard horror stories of businesses getting slapped with massive fines for improper email marketing practices. My team is constantly debating the legal nuances - some argue we need explicit consent, while others suggest our existing checkout process implies consent. The uncertainty is paralyzing. We're driving significant traffic, have a solid conversion funnel, but these abandoned cart emails feel like a legal minefield. I need a clear, actionable strategy that protects both our revenue potential and our customers' data privacy rights.