Turning retail footfall into an email list
Physical retail venues lose thousands of potential contacts every week because they have no equivalent of an e-commerce checkout field. This guide shows how Guest WiFi login - via a captive portal - gives you the same automated, verified email capture in-store that e-commerce takes for granted online. It covers the capture mechanism, GDPR consent, segmentation, campaign automation, and how to measure return visits rather than just open rates.
Why this matters for your venue
E-commerce has a structural advantage over physical retail when it comes to data. Every visitor to an online store can be tracked, prompted, and captured. A pop-up fires after 30 seconds. The checkout requires an email address. An abandoned cart triggers a follow-up. The list builds itself.
In a physical store, none of that happens by default. A shopper browses for 40 minutes, picks up three items, puts two back, and leaves. You have no idea who they were, what they looked at, or whether they will return. If they paid by card, your bank may tell you the transaction happened. They will not tell you the shopper's name or email address.
This is the retail email capture problem. And it is expensive. Acquiring a new shopper costs five times more than retaining an existing one (Purple internal data, 2024). If you cannot identify and re-engage the shoppers already walking through your doors, you are paying full acquisition cost every time.
Guest WiFi solves this. When a shopper connects to your network, you present a branded captive portal - a login screen that requires an email address or social account to grant internet access. The shopper gets online. You get a verified, GDPR-compliant contact. The list builds itself, automatically, from the footfall you already have.
Harrods deployed this approach across their physical estate and turned their Guest WiFi into a loyalty channel delivering a 57x return on investment (Purple, 2024). That figure is not a campaign metric. It is a business outcome.

The approach
The mechanism is a value exchange. You offer fast, reliable internet access. The shopper provides their contact details and explicit consent to receive marketing communications. The exchange is transparent, voluntary, and fully compliant with GDPR requirements for conscious-choice opt-ins.
The captive portal is the interface where this exchange happens. When a shopper selects your Guest WiFi network, their device automatically displays the portal. They see your brand, a short explanation of the value they are receiving, a simple form asking for their name and email address, and a clearly worded consent checkbox. They tick the box, tap the button, and they are online within seconds.
This is the physical equivalent of an e-commerce pop-up. The difference is that it is tied to a genuine value exchange - internet access - rather than a discount code. Conversion rates on captive portal logins consistently outperform website pop-ups because the motivation to complete the form is immediate and tangible.
The data collected is first-party data. You own it. It is not rented from a platform, inferred from a third-party cookie, or purchased from a data broker. It is a verified contact who walked into your store, connected to your network, and actively chose to hear from your brand.
For more on how Guest WiFi captures first-party data at scale, see the Purple Guest WiFi overview.

How to do it with your Guest WiFi
You do not need to replace your existing network hardware. Purple operates as a cloud overlay, integrating directly with your current infrastructure. We are hardware-agnostic, supporting Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, and Fortinet. If your store already has access points from any of these vendors, you can deploy Purple without touching the physical network.
Once integrated, Purple Engage handles the captive portal presentation, data capture, and authentication. The shopper's details flow securely into the Purple Engage CRM, where they are enriched with behavioural context: when the shopper visited, how long they stayed, how frequently they return, and which areas of the store they spent time in.
Authentication options give you flexibility on data quality. A shopper who logs in via Microsoft Entra ID or Google Workspace provides a verified identity automatically - the email address is confirmed by the identity provider. A shopper who logs in with a direct email address can be sent a verification link before access is granted, ensuring the contact is real and active.
The Purple Engage Capture plan handles the portal and data collection. The Engage plan adds the CRM, segmentation, and campaign automation tools. Together, they give you the full in-store email capture stack.
For UK venues, the consent mechanism must meet both GDPR and PECR requirements. The consent checkbox must be unticked by default, the language must be specific about what the shopper is consenting to, and the record of consent must be stored alongside the contact. Purple handles this by design. For a detailed breakdown of the legal requirements, see the guide on UK PECR and the soft opt-in: email marketing rules for venues.
What to send, and when
Capturing the email is step one. The value is in what you do with it. Purple Engage allows you to trigger automated campaigns based on physical behaviour, not just digital engagement.
| Trigger | Audience | Message | Timing |
|---|---|---|---|
| First login | New shoppers | Welcome email with a discount on their next visit | 30 minutes after login |
| No return in 60 days | Lapsed shoppers | Win-back offer with a time-limited incentive | Day 60 of inactivity |
| 4+ visits in a month | Frequent shoppers | Loyalty reward or early sale access | Day after the 4th visit |
| Dwell in a specific zone | High-intent shoppers | Product recommendation email for that category | Next morning |
The welcome series is the highest-priority automation to build first. A shopper who has just connected to your WiFi for the first time is at peak engagement with your brand. An email arriving 30 minutes later - while they may still be in the store or on their way home - converts at a significantly higher rate than a campaign sent days later.
The win-back campaign is the second priority. A shopper who visited four times in January and has not returned since March is a recoverable contact. A targeted email with a relevant offer, sent on day 60 of their absence, is far more efficient than paying to re-acquire them through paid social.
Segmentation improves every campaign. Purple Engage segments your list based on visit frequency, recency, and location within the venue. A shopper who consistently visits the menswear section should not receive a womenswear promotion. A shopper who visits every Saturday morning should receive offers timed to land on Friday evening.
Measuring what works
Open rates and click-through rates measure digital engagement. They do not measure whether your campaign drove a physical visit. For a retail email programme built on Guest WiFi data, the primary metric is return visits.
Because Purple tracks device connections to the network, you can attribute a physical visit to a specific email campaign. Send a win-back email on Tuesday. Check how many of the recipients connected to the WiFi in the following seven days. That is your campaign-to-footfall conversion rate. It is a metric no generic email platform can provide, because no generic email platform knows when the shopper walked back through the door.
Secondary metrics to track:
- Revenue per send: Total in-store revenue during the campaign period divided by the number of emails sent. Requires integration with your EPOS system.
- List growth rate: New contacts added per week as a percentage of total footfall. A healthy rate indicates the captive portal is converting well.
- Opt-in rate: The percentage of shoppers who connect to the WiFi and complete the login with marketing consent. Benchmark against 60-70% for a well-designed portal (Purple internal data, 2024).
- Lifetime value by channel: Compare the average spend of shoppers who are on your email list versus those who are not. This is the clearest proof of the programme's commercial value.
ISO 27001 certification covers the data handling infrastructure behind Purple's platform, giving you confidence that the data you collect is stored and processed to the highest security standards.
Where to start
- Audit your current Guest WiFi setup. Walk into your store as a shopper. Is the network open? Is there a password on a chalkboard? If so, you are not capturing any data. Identify your hardware vendor.
- Map your footfall. Understand how many shoppers connect to the WiFi versus how many walk through the door. This gap is your opportunity.
- Design the captive portal. Keep it to a name and email address. Add a clear, specific consent statement. Test it on a mobile device before going live.
- Build the automations first. Set up the welcome series and the win-back campaign before you launch. Do not wait until the list is large.
- Set your baseline metrics. Record your current email list size, weekly footfall, and any existing email engagement rates. You need a before figure to measure against.
- Review compliance. Confirm your consent language meets GDPR requirements. Store consent records alongside contact data.
- Go live and iterate. Review opt-in rates after the first two weeks. If they are below 50%, simplify the portal further or review the value exchange language.
