We have a lot of email addresses provided for certificate accounts but we'd prefer to use them only when necessary, because that's what people had in mind when they gave them to us. When we collect email addresses via marketing efforts we may use them for future marketing efforts (with the appropriate opt-out options, of course).