Skip to main content

How to leverage SMS marketing restaurants to increase return visits

This guide details how restaurant operators can use guest WiFi to capture consented first-party data and drive repeat visits through automated SMS marketing. It covers technical architecture, compliance requirements, segmentation strategies, and real-world implementation scenarios.

📖 4 min read📝 898 words🔧 2 worked examples3 practice questions📚 8 key definitions

Listen to this guide

View podcast transcript
Welcome to the Purple Intelligence Briefing. I'm your host, and today we're getting into something that every restaurant operator with more than one site should be thinking about right now: SMS marketing, and specifically how to use your guest WiFi infrastructure to build the data pipeline that makes it work. Let's start with the context. Restaurants are operating in a market where third-party delivery platforms own the guest relationship, social media reach is declining without paid spend, and email open rates in hospitality sit around 20%. That's one in five people actually seeing your message. Meanwhile, SMS messages achieve a 98% open rate, with most read within three minutes of delivery. That gap is not marginal. It changes the economics of re-engagement entirely. But here's the thing most operators miss. SMS marketing is only as good as the data feeding it. And the single best source of verified, consented guest data in a restaurant environment is your guest WiFi network. When a diner connects to your WiFi through a captive portal, they provide their name, email address, and phone number. They confirm marketing consent. That data is first-party, meaning you own it. It doesn't disappear when a platform changes its algorithm or its terms of service. Purple's Engage plan captures that data at login and automates campaigns directly from it. Across 80,000 live venues and 440 million logins in 2024, we've seen consistently that venues using WiFi-captured phone data for SMS outperform those relying on manually collected lists by a significant margin. The data is cleaner, the consent is explicit, and the guest profile is enriched with behavioural signals like visit frequency and dwell time. Now let's get into the technical architecture, because this is where the implementation decisions matter. The data capture layer sits at the captive portal. When a guest connects to your WiFi, the portal presents a branded login page. The guest authenticates, typically via email or phone number, and in doing so provides explicit consent to receive marketing communications. Under GDPR in the UK and EU, this consent must be freely given, specific, informed, and unambiguous. That means you cannot make WiFi access conditional on marketing opt-in. Purple's portal architecture separates network access from marketing consent, presenting them as distinct choices. This is the correct implementation. Any vendor that bundles them together is creating compliance exposure for you. Once captured, the phone number and consent record are stored in the guest profile within Purple's platform. That profile is enriched over time with visit data: how often the guest comes in, which site they visit, how long they stay. This behavioural layer is what enables segmentation. You're not sending the same message to a first-time visitor and a guest who's been in twelve times. Those are fundamentally different relationships, and your SMS strategy should reflect that. The segmentation framework we recommend has four tiers. First, new guests: people who've visited once in the last 30 days. Second, returning guests: two to four visits in 90 days. Third, regulars: five or more visits in 90 days. Fourth, lapsed guests: no visit in 60 days or more. Each tier gets a different message, a different offer, and a different send cadence. For new guests, the goal is a second visit. A welcome message sent 24 to 48 hours after their first visit, with a modest incentive, drives return rates. Pizza Express, for example, uses post-visit automation to send a personalised thank-you with a loyalty reward link. The timing matters: send too soon and it feels intrusive, send too late and the visit memory has faded. For returning guests, the goal is habit formation. Messages at this stage should reinforce the relationship rather than rely on discounts. Highlight new menu items, invite them to an event, acknowledge their loyalty. Stonegate Pubs uses visit-frequency data from WiFi sessions to trigger milestone messages. A simple acknowledgement that a guest has been in ten times, with no discount attached, generates measurable uplift in return visits. For lapsed guests, the goal is reactivation. A win-back message sent at the 60-day mark, with a clear, time-limited offer, is the standard playbook. The offer needs to be compelling enough to overcome inertia, but not so generous that you're training guests to wait for discounts. A free starter or a percentage off the next visit, valid for 14 days, is a reasonable benchmark. Now let me walk through a real implementation scenario. A 12-site casual dining chain deploys Purple on Cisco Meraki hardware across all sites. The Captive Portal is configured with a phone-number login option alongside email. Within 90 days, they've built a consented SMS list of 18,000 contacts across the estate. They configure four automated journeys: a welcome sequence for new guests, a loyalty milestone trigger at five visits, a slow-shift promo that fires on Tuesday and Wednesday afternoons to their returning guest segment, and a 60-day win-back for lapsed contacts. The slow-shift campaign alone, targeting 3,200 contacts with a same-day offer, drives an average of 140 additional covers per week across the estate. At an average spend of 22 pounds per cover, that's over 3,000 pounds in incremental weekly revenue from a single automated campaign. The second scenario worth discussing is a quick-service restaurant chain. QSR operators face a different challenge: high transaction volume, low dwell time, and guests who may not connect to WiFi at all. In this environment, the WiFi data capture rate is lower, but the guests who do connect are disproportionately your regulars. A QSR chain with 40 sites, running Purple on HPE Aruba hardware, captures phone numbers from roughly 15% of daily covers. That sounds modest, but at 800 covers per site per day, it's 120 contacts per site per day. Over 90 days, that's a list of over 400,000 consented contacts. The economics of SMS at that scale are significant. Let me address the compliance questions, because they come up in every client conversation. Under GDPR, you need a lawful basis for processing personal data. For SMS marketing, that basis is consent. The consent must be granular: a guest consenting to WiFi access is not automatically consenting to SMS marketing. Purple's portal architecture handles this correctly by presenting separate consent checkboxes for network access and marketing communications. The consent record, including timestamp and the specific wording presented, is stored against the guest profile. That audit trail is your defence in a regulatory inquiry. Under the Privacy and Electronic Communications Regulations, or PECR, in the UK, you also need prior consent for direct marketing by electronic means, which includes SMS. The rules align closely with GDPR consent requirements, but PECR applies even where GDPR's legitimate interests basis might otherwise apply. In practice, this means explicit opt-in is non-negotiable for SMS. Do not rely on soft opt-in for text messages. Now for the implementation pitfalls. The most common one is list decay. A phone number captured 18 months ago may belong to someone who's changed their number, moved away, or simply lost interest. Sending to a stale list drives up unsubscribe rates and damages your sender reputation with carriers. Scrub your list quarterly. Remove contacts who haven't opened or responded in six months. A smaller, engaged list outperforms a large, disengaged one every time. The second pitfall is frequency. Two to four messages per month is the ceiling for most restaurant audiences. Above that, unsubscribe rates climb sharply. The exception is highly segmented, highly relevant messages: a reservation reminder, a birthday offer, a response to a specific behaviour. Relevance earns frequency tolerance. Generic broadcast messages do not. The third pitfall is timing. Restaurant SMS campaigns perform best when sent at decision-making moments: Tuesday and Wednesday mornings for midweek dinner plans, Friday mornings for weekend bookings, and 30 to 60 minutes after a visit for feedback requests. Avoid sending after 9pm or before 9am. Carriers and regulators both frown on it, and your guests certainly do. Now, the rapid-fire questions I get most often in client briefings. Can I use SMS for reservation reminders without marketing consent? Yes, transactional messages, including booking confirmations and reminders, fall outside the marketing consent requirement. You need a lawful basis for processing the data, but not explicit marketing consent for the message itself. How do I handle opt-outs? Every SMS must include a clear opt-out mechanism, typically a reply keyword like STOP. Purple's platform handles unsubscribe processing automatically and updates the consent record in the guest profile. Do not send to contacts who have opted out. The fines for doing so are substantial. What's the right SMS platform to integrate with Purple? Purple's Engage plan integrates with major SMS providers and CRM platforms via webhook and native connectors. The specific platform matters less than the integration architecture: you want bidirectional sync so that opt-outs, delivery failures, and engagement data flow back into the guest profile and inform future segmentation. To summarise the key points from today's briefing. Guest WiFi is the most reliable source of verified, consented phone data in a restaurant environment. Segment your SMS list by visit behaviour, not just demographics. Automate the four core journeys: welcome, loyalty milestone, slow-shift promo, and win-back. Keep frequency at two to four messages per month unless the message is highly relevant. Ensure your captive portal separates network access consent from marketing consent. Scrub your list quarterly to maintain deliverability. And measure return visit rate, not just open rate, as your primary success metric. If you want to see how Purple's Engage plan maps to your specific estate, the next step is a technical scoping call with one of our solutions architects. We'll review your current hardware, your CRM setup, and your existing data capture workflow, and give you a clear picture of what's achievable in the first 90 days. Thanks for listening. I'll see you in the next briefing.

header_image.png

Executive Summary

Restaurant operators face a structural challenge: third-party delivery platforms own the guest relationship, organic social reach is negligible, and hospitality email open rates sit around 20% [1]. To drive return visits predictably, operators need a direct, high-engagement channel. SMS marketing delivers a 98% open rate, with most messages read within three minutes [1] [2]. However, the success of an SMS programme depends entirely on the quality of the data feeding it. This guide explains how to use your existing guest WiFi infrastructure to build a compliant, first-party data pipeline, and how to automate SMS campaigns that generate measurable revenue uplift.

Technical Deep-Dive

The Data Capture Architecture

The foundation of restaurant SMS marketing is the data capture layer. Relying on staff to manually collect phone numbers at the point of sale is slow, prone to error, and difficult to scale. The most reliable method is to integrate data capture into the guest WiFi authentication flow.

When a diner connects to the venue's network, the traffic is routed to a captive portal. Purple's architecture handles this authentication process. The guest is presented with a branded login screen requiring their phone number. Crucially, the portal must separate network access from marketing consent to comply with GDPR and PECR regulations. The guest must actively opt in to receive SMS marketing; access to the WiFi cannot be conditional on this consent [3].

Once authenticated, the guest's phone number, consent record, and device MAC address are stored in the Purple CRM. This creates a unified guest profile. Every subsequent visit by that device is logged automatically, enriching the profile with behavioural data including visit frequency and dwell time.

wifi_sms_architecture.png

Integration and Automation

The guest profile data is then synced with an SMS marketing platform or CRM. Purple's Engage plan facilitates this via native connectors or webhooks. The integration must be bidirectional: when a guest replies 'STOP' to an SMS, the opt-out must immediately update the central guest profile to prevent further sends and ensure compliance.

Implementation Guide

1. Configure the Captive Portal

Deploy the Purple captive portal across your hardware estate (e.g., Cisco Meraki, HPE Aruba). Configure the login options to prioritise phone number capture. Ensure the marketing consent checkbox is unticked by default and clearly states what the guest is opting into.

2. Define the Segmentation Logic

Do not send broadcast messages to your entire list. Use the visit data captured by the WiFi network to segment your audience into four tiers:

  • New Guests: 1 visit in the last 30 days.
  • Returning Guests: 2-4 visits in the last 90 days.
  • Regulars: 5+ visits in the last 90 days.
  • Lapsed Guests: 0 visits in the last 60 days.

3. Build the Automated Journeys

Configure automated triggers based on these segments:

  • The Welcome Sequence: Trigger an SMS 24 - 48 hours after a new guest's first visit. Offer a modest incentive (e.g., a free side dish) to drive the crucial second visit.
  • The Milestone Trigger: Acknowledge loyalty without discounting. When a guest logs their 5th or 10th visit, trigger a thank-you message.
  • The Slow-Shift Promo: Target the 'Returning Guests' segment. Send a same-day offer (e.g., 20% off food) at 10:00 AM on traditionally quiet days like Tuesday or Wednesday [1].
  • The Win-Back Campaign: Trigger a message when a guest enters the 'Lapsed' segment (60 days since last visit). Provide a strong, time-limited offer to break their inertia.

Best Practices

  • Frequency Limits: Cap SMS sends at 2 - 4 messages per month per guest. Exceeding this drives high unsubscribe rates.
  • Timing: Send messages when guests are making dining decisions. Mid-morning (10:00 AM - 11:00 AM) works well for lunch or same-day dinner offers. Avoid sending messages before 9:00 AM or after 9:00 PM.
  • List Hygiene: Scrub your list quarterly. Remove contacts who have not engaged (visited or clicked a link) in six months to protect your sender reputation.

sms_vs_email_comparison.png

Troubleshooting & Risk Mitigation

Compliance Failures

Risk: Fines under GDPR or TCPA for sending unsolicited messages. Mitigation: Maintain a strict separation between WiFi terms of service and marketing consent on the Captive Portal. Store the timestamp and exact wording of the consent agreement in the guest profile. Implement automated opt-out processing.

High Unsubscribe Rates

Risk: Rapid list decay due to irrelevant messaging. Mitigation: Review your segmentation. If you are sending a 'Free Dessert for your Birthday' message to a guest who visited once three years ago, they will unsubscribe. Ensure offers match the guest's relationship tier.

ROI & Business Impact

To measure the success of an SMS programme, track the Return Visit Rate and Incremental Revenue, not just open rates.

For example, if a slow-shift promo is sent to 3,000 returning guests, and 100 of those guests visit that evening (tracked via WiFi authentication or POS integration), you can calculate the exact revenue generated by that campaign. At an average spend of £25 per cover, that single automated message generates £2,500 in incremental revenue.

References

[1] Message IQ. SMS Marketing for Restaurants: Complete Guide (2026). Available at: https://messageiq.io/blogs/sms-marketing-for-restaurants/ [2] Olo. Why Every Restaurant Brand Should Use SMS Marketing. Available at: https://www.olo.com/blog/why-sms-marketing-matters-for-restaurants [3] MyWiFi Networks. GDPR & WiFi Data Collection: 2026 Compliance Checklist. Available at: https://www.mywifinetworks.com/blog/gdpr-wifi-data-collection-guide

Podcast Briefing

Listen to our senior consultant discuss the strategy and implementation of SMS marketing for restaurants.

Key Definitions

Captive Portal

A web page that users must interact with before being granted access to a public WiFi network. It is the primary data capture mechanism for venue operators.

IT teams configure captive portals to authenticate users, present terms of service, and capture first-party data and marketing consent.

First-Party Data

Information collected directly from your customers with their explicit consent, such as phone numbers gathered via a guest WiFi login.

Unlike third-party data bought from brokers, first-party data is highly accurate and owned entirely by the venue, making it the foundation of effective CRM strategies.

Opt-In Consent

The explicit, unambiguous agreement by a user to receive marketing communications.

Under GDPR, pre-ticked boxes or bundled consent (e.g., agreeing to marketing to get WiFi access) are invalid. Consent must be an active, separate choice.

Dwell Time

The duration a guest's device remains connected to or detected by the venue's WiFi network during a single visit.

Operations directors use dwell time analytics to measure table turn rates, identify service bottlenecks, and segment guests based on their typical visit length.

List Decay

The natural degradation of a marketing database over time as people change phone numbers or lose interest in the brand.

Marketing managers must regularly scrub their SMS lists to remove inactive contacts, which protects sender reputation and reduces messaging costs.

Bidirectional Sync

An integration architecture where data flows seamlessly in both directions between two systems (e.g., Purple CRM and an SMS platform).

If a guest replies 'STOP' to an SMS, bidirectional sync ensures that opt-out is immediately reflected in the central guest profile, preventing compliance breaches.

Transactional Message

An SMS sent to facilitate an agreed-upon transaction, such as a reservation confirmation or a receipt.

Transactional messages do not require explicit marketing consent, but they must not contain promotional content.

Win-Back Campaign

An automated marketing sequence designed to re-engage guests who have not visited the venue for a specified period (e.g., 60 days).

CRM managers use win-back campaigns to identify lapsed guests and present them with compelling offers to break their inertia and return to the venue.

Worked Examples

A 15-site casual dining group wants to drive traffic on Tuesday evenings. They have a database of 20,000 contacts collected via their guest WiFi.

The IT and Marketing teams configure a 'Slow-Shift Promo' automated journey. They segment the database to target only 'Returning Guests' (2 - 4 visits in the last 90 days) who live within a 5-mile radius of a venue. At 10:30 AM on Tuesday, they trigger an SMS offering a complimentary starter with any main course, valid only for that evening. The message includes a unique trackable link to the reservation platform.

Examiner's Commentary: This approach works because it targets an engaged segment with a highly relevant, time-sensitive offer. Sending at 10:30 AM catches guests as they are considering their evening plans. By excluding 'Regulars', the venue avoids discounting meals for guests who were likely to visit anyway, protecting margin.

A quick-service restaurant (QSR) chain notices a high drop-off rate after a customer's first visit. They need to increase the frequency of second visits.

The chain implements a 'Welcome Sequence'. When a device connects to the guest WiFi for the first time and the user opts into marketing, the Purple platform logs the visit. 48 hours later, an automated SMS is triggered: 'Thanks for visiting us! Show this text on your next visit within 14 days for a free coffee on us.'

Examiner's Commentary: The 48-hour delay is crucial; it is close enough to the initial visit that the brand is still front-of-mind, but not so immediate that it feels intrusive. The 14-day expiry creates urgency, encouraging the habit-forming second visit.

Practice Questions

Q1. Your marketing team wants to increase the size of the SMS database quickly. They propose changing the captive portal configuration so that guests must check the marketing opt-in box to access the free WiFi. As the IT Director, do you approve this change?

Hint: Consider the GDPR requirements for consent.

View model answer

No. Under GDPR, consent must be freely given. Making WiFi access conditional on marketing consent constitutes 'bundled consent', which is invalid. The captive portal must separate network access from marketing opt-in to remain compliant.

Q2. A casual dining chain is seeing a high unsubscribe rate from their SMS campaigns. They currently send one message per week to their entire database of 50,000 contacts, usually offering 10% off. What architectural or strategic change should they implement?

Hint: Think about how WiFi data can improve relevance.

View model answer

They need to implement segmentation based on visit behaviour. Sending a generic broadcast message to the entire list causes fatigue. They should use the visit frequency data captured by the WiFi network to segment the list into New, Returning, Regular, and Lapsed guests, and tailor the message cadence and offer to each specific group.

Q3. You are deploying a new SMS marketing platform that will integrate with Purple. A guest receives a promotional text and replies 'STOP'. What must happen next at the system architecture level?

Hint: Consider data synchronisation between platforms.

View model answer

The SMS platform must process the opt-out and immediately push that status update back to the central guest profile in the Purple CRM via a bidirectional sync (e.g., webhook or API). This ensures the guest is suppressed from all future marketing lists and maintains compliance.