Email marketing for shopping centres and malls
Shopping centres capture millions of footfall visits each year but rarely own the relationship with the shopper. This guide explains how centre-wide Guest WiFi turns anonymous visitors into verified, GDPR-compliant email contacts, and how Purple Engage automates the campaigns that bring them back.
Why this matters for your venue
Shopping centre marketing often relies on generic mass media, paid social, or hoping individual retailers share their data. None of those approaches build an asset you own. When you depend on third-party channels, you rent your audience. When you capture first-party data through your own infrastructure, you own the relationship.
The cost of not capturing this data is measurable. Shoppers visit, spend money, and leave. You have no way to measure their frequency, no way to understand which zones they visit, and no way to invite them back. You cannot run effective shopping centre marketing without knowing who is in the building.
Generic email tools like Mailchimp, Klaviyo, or HubSpot send campaigns well. They do not build the list. You need a mechanism that turns anonymous footfall into verified, conscious-choice opt-ins. That mechanism is already in your ceiling.
Purple processes 440 million logins a year across 80,000+ live venues (Purple internal data, 2024). Centres using our platform see their email database grow continuously from day one, without staff intervention, without competition entry forms, and without relying on retailers to share their data.
The approach
The core method uses your existing network hardware to capture visitor details at the point of WiFi authentication. When a shopper connects to the Guest WiFi, they authenticate through a captive portal - the web page that appears before they access the internet. They provide their email address and consent to marketing in a clear, GDPR-compliant opt-in flow. The consent is a conscious choice: an unticked checkbox with plain-language copy.
This creates a continuous, automated pipeline of first-party data. The list builds itself. Once the shopper authenticates, Purple tracks their movement across the centre using access point association data. You see which anchor stores they visit, how long they dwell in the food court, and whether they return to the same zone on subsequent visits.
You then use this behavioural data to segment your audience. A shopper who visits the luxury wing twice a month needs a different email to a family spending three hours near the cinema on a Saturday afternoon. Relevant shopping mall email marketing relies on this exact context - and that context only exists if you have the spatial data behind it.

The centre-wide approach is the key differentiator. Individual retailers capture their own shoppers. But as the centre operator, you capture every shopper who connects to the WiFi, regardless of which stores they visit. You build a single, unified database of your entire visitor population. No individual retailer has that view. Only you do. That database is your most valuable marketing asset.
How to do it with your guest WiFi
Purple Engage turns your network into a retail centre CRM. We apply a cloud overlay to your existing hardware - you do not need to replace your access points. Purple supports Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, and Fortinet. If you already run any of these, you are ready to deploy.
When a shopper logs in, they see a branded captive portal. They authenticate via email or social login. Purple captures this data and stores it securely. We are ISO 27001 certified, GDPR and CCPA compliant, and B Corp certified. The data collection is auditable and defensible.
Guest WiFi data flows directly into Purple Engage, where you build segments, design automations, and send campaigns. The platform connects the physical presence data from the network to the email marketing layer. This is the connection that tools like Mailchimp and Klaviyo cannot make on their own - they have no visibility of who walked through your door.
| Capability | Generic email tool | Purple Engage |
|---|---|---|
| Send email campaigns | Yes | Yes |
| Build list from WiFi logins | No | Yes |
| Segment by physical zone | No | Yes |
| Measure return visit rate | No | Yes |
| GDPR-compliant opt-in at point of capture | No | Yes |
| Hardware-agnostic deployment | N/A | Yes |
What to send, and when
Timing and relevance define footfall marketing success. Sending a monthly newsletter to your entire database is the least effective approach. Automated, trigger-based campaigns outperform batch sends because they are relevant to the individual at the moment they receive them.
Welcome automation. Set up a welcome email for every first-time visitor. Send it 24 hours after their first visit. Include a centre map, parking information, and a small incentive for their next visit. This single automation, running continuously, builds a positive relationship with every new shopper from day one.
Lapsed visitor win-back. Define your lapsed threshold - typically 90 days without a WiFi connection. When a shopper crosses that threshold, trigger an email with a compelling offer. A free coffee, a parking discount, or early access to an upcoming event. The offer does not need to be expensive. The signal that you noticed their absence is often enough.
Zone-based promotions. Shoppers who frequently visit the dining precinct should receive food and beverage offers. Shoppers who dwell in the fashion zone should receive style-related content. You can apply the same RFM segmentation principles used in hospitality - see RFM segmentation for restaurants and hospitality for a detailed framework. The recency and frequency metrics translate directly to retail.
Event-driven campaigns. When you have a centre event - a late-night shopping evening, a pop-up market, a school holiday activation - segment by visit history. Send the event invitation to shoppers who have visited in the last 60 days. Send a stronger incentive to shoppers who have not visited in 60 to 90 days. Do not send to lapsed contacts unless you have a win-back offer attached.

The table below shows a recommended automation stack for a typical shopping centre.
| Automation | Trigger | Timing | Audience |
|---|---|---|---|
| Welcome | First WiFi login | 24 hours after visit | All new contacts |
| Second visit nudge | No return after welcome | 14 days after welcome | New contacts who have not returned |
| Zone offer | Repeated visits to specific zone | 48 hours after third zone visit | Zone-specific segment |
| Lapsed win-back | 90 days without login | Day 90 | Lapsed shoppers |
| Event invitation | Upcoming event in calendar | 7 days before event | Active visitors (last 60 days) |
| Post-event follow-up | Event date passes | 48 hours after event | Attendees who connected during event |
Measuring what works
Open rates and click-through rates do not pay the rent. You must tie your email marketing to return visits and revenue. This is the measurement gap that most centres fail to close.
Because Purple tracks physical presence through WiFi authentication, you can measure the exact return rate of your campaigns. You send an email to 10,000 lapsed shoppers. Purple shows you exactly how many of those individuals connected to the Guest WiFi in the following 14 days. That is your true campaign conversion rate. It is a physical metric, not a digital one.
Track these four metrics for every campaign you send:
Return visit rate. The percentage of email recipients who authenticated on the Guest WiFi within 14 days of receiving the campaign. This is your primary success metric.
Incremental visits. Compare the visit frequency of email subscribers versus non-subscribers. Subscribers who receive regular, relevant communications visit more often. That frequency difference is the commercial case for your marketing programme.
Revenue per send. If your retailers share transaction data, you can calculate the average spend per shopper on return visits driven by email. This is the metric your board and your retail partners want to see.
Opt-in rate. The percentage of WiFi users who consent to marketing. A well-designed captive portal should achieve an opt-in rate above 60% (Purple internal benchmark, 2024). If yours is lower, review the portal design and consent copy.
Where to start
- Audit your existing hardware. Confirm you run Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, or Fortinet access points.
- Configure your captive portal. Ensure the GDPR consent language is clear, the opt-in checkbox is unticked by default, and the brand design matches your centre identity.
- Review Purple Engage to understand the automation and segmentation capabilities available.
- Define your three core segments before launch: new visitors, frequent shoppers, and lapsed visitors.
- Activate a welcome automation for all new Guest WiFi registrations.
- Set your reporting dashboard to show return visit rate as the primary metric.
- Review results after 30 days. Identify which segments return at the highest rate and build from there.
