An opt-out must be easy to make, quick to take effect and durable. Removing someone from one campaign while leaving them in the source data guarantees they are contacted again.

Good practice is to suppress at both person and company-email level, and to keep a minimal record of the request itself so the suppression can be proven.

Responding well to an opt-out costs nothing and prevents complaints that are expensive in reputation terms.