How to build a guest WiFi email list that actually converts

Turn your guest WiFi login into the sign-up form. Guests give an email address to connect, then tick a separate, optional box to receive marketing. That builds a guest WiFi email list of verified contacts, each consented under GDPR and tied to a real visit. Every contact is ready for welcome, return-visit and win-back emails straight away.

What does a guest WiFi email list do for your venue?

A guest WiFi email list turns people already inside your venue into contacts you can bring back. Plan around four outcomes: repeat visits, opt-in rate, revenue per send and lifetime value. Every decision in this guide serves one of those numbers.

The mechanism is the login itself. A diner sits down and connects to your guest WiFi. To get online, they give an email address. On the same screen, they choose whether to hear from you. That choice is the opt-in, and no member of staff has to ask for it.

This is the gap in the platforms you may be comparing. Mailchimp, Klaviyo and HubSpot send campaigns to a list you already hold. Online, your website fills that list. In a restaurant, bar, hotel or shop, the website sees only some of the people who walk in. Those platforms send the email, but they do not build the list from your foot traffic.

What you collect is first-party data. That means contact details and visit history from your own guests, collected on your premises with their consent. No competitor holds the same list. Each contact also carries context a web form never sees, such as which venue they visited and when. This is what WiFi marketing means in practice.

The approach runs at scale. Purple's Guest WiFi is live in 80,000+ venues and handled 440 million logins in 2024, according to Purple's own platform data.

How does WiFi email capture compare with bought lists and sign-up forms?

Most venues already collect emails somewhere. The real question for opt-in list building is which method gives you consented contacts at volume. You also need enough context on each contact to send something relevant. The table compares the four common routes.

Method	How contacts arrive	Consent evidence	Data quality	Visit data attached	Staff effort	Who it suits
Guest WiFi login with opt-in	Automatically, every time a guest connects	Separate opt-in captured at the moment of login	Verified address typed by the guest on their own device	Venue, date and time of every visit	None after setup	Any venue with guest WiFi and regular foot traffic
Paper or tablet sign-up at the till	Only when staff remember to ask	Paper slips or a tablet log, often incomplete	Handwriting and typing errors	None	High: needs attention every shift	Single sites testing demand before investing
Website or booking-engine form	Only from visitors who use your site	Recorded by the form provider	Typed by the visitor, unverified without double opt-in	Online behaviour only, no in-venue visits	Low	Venues where most bookings or sales happen online
Bought or rented list	In bulk from a data broker	Rarely names your brand, so fails the specific-consent test	Unknown origin, often out of date	None	Low to buy, high to clean	Not recommended for any venue

Two rows matter most. The WiFi login captures contacts at the moment of the visit, with no staff effort, and attaches visit history to every record. The bought list fails on consent before it fails on performance.

GDPR Article 4(11) defines consent as freely given, specific, informed and unambiguous. The ICO's direct marketing guidance adds a further test. Consent collected by a third party only counts if it specifically named your organisation. Broker lists rarely do.

What do you need before you start building your list?

You need fewer things than most platform changes demand. Get these seven in place first.

• Guest WiFi on the hardware you own. Purple is hardware-agnostic and works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. It layers on top of your existing network, so there is no rip and replace.
• A privacy notice guests can read at login. GDPR Article 13 requires you to tell people who you are and how you use their data at the point of collection.
• A short list of fields. Ask for an email address and a first name. Add date of birth only if you will send birthday offers. GDPR Article 5(1)(c) requires data minimisation, and a shorter form is quicker to finish.
• Signed-off consent wording. It should name your brand, say what you will send and how often, and explain how to unsubscribe.
• A sending domain inbox providers trust. Authenticate it with SPF, DKIM and DMARC before your first send. Our guide, Email deliverability for venues: a compliance checklist, covers each step.
• A first offer worth opening. Decide what the welcome email gives a guest: a drink, a dessert, a room upgrade or early access to a sale.
• One owner for the numbers. Name the person accountable for opt-in rate and return visits. Without an owner, nobody notices when sign-ups dip.

How do you set up email capture on your guest WiFi?

Setup is mostly decisions, not engineering. Purple's support documentation covers the configuration steps for your network. This section covers the choices that decide how many guests opt in.

Design a login page guests will finish

The login page is the screen a guest sees before they get online. Technically it is called a captive portal. Keep it to one screen, in your brand colours, with an email field and a connect button. Every extra field gives a guest a reason to switch to mobile data instead.

Separate the marketing opt-in from the WiFi terms

This is the conscious-choice opt-in: an optional, unticked box, separate from accepting the WiFi terms. GDPR Recital 32 states that silence, pre-ticked boxes and inactivity are not consent. Guests who leave the box blank still get online. Make marketing a condition of access and Article 7(4) puts the validity of that consent in doubt.

Write consent copy that sets expectations

Name your venue, the channel and the frequency. A line such as this works:

Yes, send me offers and news from [venue name] by email, about twice a month. Unsubscribe any time.

Then keep the promise. If you say twice a month, send twice a month.

Connect the list to Purple Engage

Once the login page is live, every opted-in guest becomes a contact in Purple Engage. The list builds itself from WiFi logins, with each guest's visits attached. There is no weekly spreadsheet to export, clean and upload. The Purple Engage Product overview shows what the platform includes.

Segment from the first login

Set up four segments before launch: venue, first visit date, number of visits and last visit date. For a multi-site group, venue matters most. A guest who visits your Leeds site does not want the Bristol events calendar.

Test with staff phones before go-live

Ask three staff members to connect. One opts in, one declines, and one unsubscribes after the welcome email arrives. Check each outcome matches what the consent copy promised.

What should you send to new WiFi contacts, and when?

Trigger emails from visits, not only from the calendar. Visit data tells you who is new, who is loyal and who has gone quiet. Start with the welcome and the win-back. Add the rest once those two work.

Email	Trigger	When to send	What it contains	What to measure
Welcome	First visit with opt-in	Within 24 hours	Thank you, what to expect, a reason to return	Clicks, second visits within 30 days
Second-visit offer	No return after first visit	7-14 days after first visit	A time-limited offer for the next visit	Redemptions, return-visit rate
Feedback request	Any visit	The morning after	One-question rating with a review link	Response rate, ratings by venue
Birthday	Date of birth on file	7 days before the birthday	An offer valid for the birthday week	Redemptions
Win-back	No visit for a set period	45 days for restaurants and bars, 10 months for hotels	A reminder plus an offer	Return-visit rate against a holdout group
Monthly update	Opted in and active	Once a month	Events, menus, new stock	Clicks, unsubscribes

Adjust the timings to your visit cycle. A bar's regulars may return weekly, so a 45-day gap is a real warning sign. A hotel guest may stay once a year, so time the win-back a few weeks before the anniversary of their last stay. A shopper responds to launches and seasons, so tie sends to new stock and sale dates.

If you run a loyalty scheme, the WiFi list becomes its foundation. Our guide, Building a restaurant loyalty program on email and WiFi, shows how to structure rewards around visit data.

What does this look like in a real venue?

The two worked examples below use illustrative planning figures, not results from a named venue. Replace each assumption with your own numbers to build a forecast you can defend.

A 200-room hotel winning back direct bookings

Situation. The hotel runs at 75% occupancy, so roughly 150 rooms are occupied each night. Most bookings arrive through online travel agents. The hotel holds no direct marketing consent for those guests, so its own list barely grows.

What it does. The hotel adds a WiFi login with a conscious-choice opt-in across rooms, lobby and restaurant. The welcome email offers a direct-booking rate for the next stay, with a unique rate code. A win-back goes out 10 months after each stay.

The outcome to measure. Over 30 days, 150 rooms a night gives 4,500 room-nights. With an average stay of two nights, that is about 2,250 stays. Suppose 60% of stays connect and 35% of those opt in. The hotel then adds about 470 consented contacts a month, or more than 5,600 a year. If 3% of each month's new contacts rebook with the rate code, that is 14 direct stays a month. Each one is a stay booked without a third-party commission.

A 12-site restaurant group replacing tablet sign-ups

Situation. The group collects emails on a tablet at the till. Staff rarely offer it during busy services. Each site adds around 40 contacts a month, or 480 across the group.

What it does. The group switches to guest WiFi email capture with a conscious-choice opt-in. It sends a welcome within 24 hours and a win-back offer to diners not seen for 45 days. It holds back 10% of each win-back segment as a control group that receives nothing.

The outcome to measure. Suppose each site sees 1,500 unique diners connect each month and 30% opt in. Each site then adds 450 contacts. Across 12 sites, that is 5,400 a month against 480 before: more than 11 times the volume. For the win-back, suppose 18% of emailed diners return within 30 days, against 11% of the control group. That seven-point gap is the lift the email created, and the number to report to your board.

How do you know your guest WiFi email list is working?

Measure against the four outcomes from the start, not open rates alone. Set a baseline in your first 30 days. Review weekly for the first month and monthly after that.

• Opt-in rate. Opted-in contacts divided by unique WiFi logins. This shows whether your login page and consent copy work. Test one change at a time.
• List growth per venue. New contacts per site per month. A site well below the group average is the first place to check signage and the login page.
• Click rate, not open rate. Apple's Mail Privacy Protection, launched in 2021, preloads email content and inflates open figures. Clicks show real interest.
• Return-visit rate against a holdout. Compare guests who got an email with a control group who did not. Without a holdout, you cannot separate the email's effect from guests who would have returned anyway.
• Revenue per send. Attributed revenue divided by emails delivered. Attribute through offer codes, rate codes or a match against your till data.
• Complaint and unsubscribe rates. Google's email sender guidelines tell senders to keep spam rates reported in Postmaster Tools below 0.3%. Check this after every new campaign type.
• Lifetime value. Visits and spend per contact over 12 months. This is the number that justifies the programme.

What goes wrong with WiFi email capture, and how do you avoid it?

Bundling consent with the WiFi terms

A single "I agree" box covering terms and marketing does not give you valid consent. Replace it with a separate, unticked marketing box, as Recital 32 requires.

Asking for too much on the login page

Postcode, phone, date of birth and gender on one form turn a five-second login into a chore. Ask for email and first name. Gather more later through preference links in your emails.

Waiting weeks before the first email

A guest who opted in on Friday and hears nothing until next month may not remember you. Send the welcome within 24 hours, while the visit is fresh.

Sending one message to the whole list

A blanket monthly blast ignores the venue and visit data you hold. Segment by venue and recency, and send fewer, more relevant emails.

Neglecting deliverability

Since February 2024, Google and Yahoo have required bulk senders to authenticate their email and offer one-click unsubscribe. Miss either and your messages risk the spam folder. Work through the deliverability checklist linked above before launch.

Topping up the list with bought data

Mixing purchased contacts into a WiFi-built list puts your sender reputation at risk. It also fails the ICO's test on third-party consent. Keep the list first-party and opted in, with nothing else added.

Frequently asked questions

Is collecting email addresses through guest WiFi GDPR compliant?

Yes, provided the marketing opt-in is separate, optional and unticked, and guests can connect without it. GDPR Article 4(11) requires consent to be freely given, specific, informed and unambiguous. Article 7(3) requires withdrawal to be as easy as giving consent. Purple is ISO 27001 certified and GDPR and CCPA compliant. Your own privacy notice must still explain how you use the data you collect.

Will Purple work with the WiFi hardware we already have?

Yes, Purple is hardware-agnostic and runs on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. It layers on top of your existing network, so you do not replace access points to start building a list. Your IT team or WiFi provider connects the network to Purple. Your marketing team then manages the login page and the emails.

Do we have to replace Mailchimp, Klaviyo or HubSpot?

No. Purple integrates with CRM and marketing platforms, so you can pass WiFi-captured contacts into the system your team already uses. You can also run campaigns in Purple Engage, where the list and each guest's visit history sit together. Check the connector for your specific platform with Purple's team before you commit, so you know which fields and visit data will carry across.

How much does Purple Engage cost?

Purple Engage sits within Purple's plan range of Connect, Capture and Engage, and Purple's team quotes for your estate. Ask for figures based on your number of venues and the features you need. Compare the total against what you spend today on a separate email platform, list cleaning and the staff time spent collecting sign-ups at the till or front desk.

How quickly will the list start growing?

Your list starts growing from the first guest login after the page goes live. Because Purple layers on top of your existing WiFi, there is no hardware project to wait for. Most of the lead time sits with your team: agreeing consent wording, designing the login page and writing the welcome email. Use your first 30 days of opt-ins as the baseline for every later test.

What opt-in rate should we expect?

Your own first 30 days are the only benchmark worth using. Opt-in rates move with your login page design, the value you promise in the consent copy and how visibly you promote the WiFi. Set the baseline, then test one change at a time, such as a clearer offer line or better table signage. Report the rate by venue to see where to act first.

Why not buy an email list to grow faster?

Because a bought list rarely carries valid consent for your brand. The ICO's direct marketing guidance says consent collected by a third party only counts if it specifically named your organisation. Bought contacts also carry no visit history, so you cannot segment them by venue or recency. A WiFi-built list grows with your foot traffic, and every contact has already been through your door.