Consent is express and captured per channel, so email and SMS are always separate permissions.
What the fan sees
At sign-in, fans see disclosure copy naming the artist and the label, confirm with a one-time code, and immediately get a confirmation carrying STOP and unsubscribe instructions. The opt-out is present from the first message rather than buried later.
How it is logged
SMS and email consent log separately, each with timestamps and the version of the disclosure the fan actually saw. That version history is what makes a consent record defensible rather than just recorded.
The rule that catches teams out
A phone number added later never becomes SMS consent. If a fan gives a number for order updates or at some other point after sign-in, that is not permission to market to them by text. The system enforces this rather than relying on anyone to remember it.
Opting out
Fans reply STOP to any text to stop texts, or use the unsubscribe link in any email to stop emails. The two are independent, so stopping one does not stop the other, and messages are never a condition of buying anything.
Per campaign
Your privacy policy and opt-in language are set up per campaign before launch, so the disclosure matches the actual parties and the actual data use for that release.