Retail park WiFi platforms for landlords: shared guest access and tenant footfall reports

A retail park landlord needs one guest WiFi network covering the car park, walkways and shared spaces. Purple runs it as a cloud overlay on outdoor access points from Cisco Meraki, HPE Aruba or Ruckus. The platform should report visits, dwell and repeat visits in aggregate for tenants and leasing. The landlord owns a consented, scheme-level visitor list.

Which retail park WiFi model should a landlord choose?

Most open-air retail parks end up with one of three models. Your choice decides three things: who sees the data, who owns the visitor list, and whether the car park is covered at all.

• Tenant-by-tenant networks. Each retailer runs WiFi inside its own unit. You install nothing, so the car park, walkways and food kiosks have no coverage.
• Landlord network, connection only. You cover shared spaces with an open network. Shoppers get online, but you collect no login, no consent and no reporting beyond raw device counts.
• Landlord shared guest network with reporting. One network spans the whole scheme. A captive portal handles login and consent. A captive portal is the page a device shows before it grants internet access. Visit reports and a consented visitor list belong to you.

The third model is the only one that gives you data to use in leasing and marketing. Tenants keep their own networks for tills, handheld stock devices and staff. Your network covers the space between units, where no single tenant has a reason to invest.

This is the model Purple Access delivers through Guest WiFi and WiFi Analytics. Purple Engage holds your scheme-level visitor list. Purple runs at 80,000+ live venues in 90 countries and handles 500 million users and logins a year (Purple's own data).

Where the three models genuinely differ

	Tenant-by-tenant networks	Landlord network, connection only	Landlord shared guest network with reporting
Car park and walkway coverage	None	Full scheme	Full scheme
Hardware the landlord buys	None	Outdoor access points, backhaul, switches	Same outdoor kit, or your existing access points with a cloud overlay
Visitor login	Separate login in each unit	None, open network	One captive portal across the scheme, or automatic return via OpenRoaming
Visit and dwell reports	Each tenant sees its own unit only	Device counts from the controller only	Scheme-wide and zone-level visits, dwell, new and returning visitors
Data you can share with tenants	Nothing at scheme level	Raw counts with no visit context	Aggregated zone reports with no personal data
Who owns the visitor list	Each tenant, separately	Nobody, no list exists	The landlord, as controller
Landlord can email about events	No	No	Yes, to visitors who opted in
Who it suits	Parks with no budget for shared space	Parks that need basic connectivity only	Landlords using data in leasing, events and marketing

How does a retail park cover open-air areas and car parks?

Indoor WiFi design assumes walls, ceilings and short distances. A retail park has none of those. Coverage is outdoor, long-range and line-of-sight, so the design starts with mounting points, power and backhaul.

Outdoor access points, not extenders

Specify outdoor-rated access points in enclosures rated IP66 or IP67 under IEC 60529. These ratings cover dust and water ingress. Directional or sector antennas aim coverage down parking aisles and along shopfronts, not into open sky. Avoid extenders. An extender rebroadcasts a weak signal and cuts the capacity each visitor gets. Our blog on WiFi extender vs Access point: Which one do you need? explains the difference.

Mounting, power and backhaul

Lighting columns and building fascias are the usual mounting points. Check the power before you commit to a column. Many car park lighting circuits switch on only at dusk, through a photocell or timer. An access point on that circuit goes dark in daylight. Specify a permanent supply, or Power over Ethernet (PoE, IEEE 802.3at or 802.3bt) from a nearby cabinet.

Ethernet or fibre to each access point gives the most reliable backhaul. Trenching across a live car park is disruptive and slow. Point-to-point wireless bridges can carry traffic between columns and the nearest building instead. Cambium and Ubiquiti UniFi both sell outdoor bridge ranges.

Radio planning

Parked cars sit between access points and shoppers, and metal bodywork absorbs and reflects signal. Mount access points high enough to clear vehicle roofs. Survey on a busy Saturday, not an empty Tuesday morning. Ofcom's licence-exemption rules set which 5 GHz channels and power levels you may use outdoors in the UK. Ask your installer to confirm the channel plan against them.

Event days put hundreds of devices on a single radio. WiFi 6 (IEEE 802.11ax) access points handle dense crowds more efficiently than older standards. Our explainer WiFi 6 802.11 ax explained: Speed, features and gains covers the detail.

Security and separation

Put the guest network on its own VLAN. A VLAN (virtual LAN) keeps traffic logically separate on shared switches. Keep CCTV, ANPR cameras, car park payment terminals and the centre management office on separate VLANs. Enable client isolation so guest devices cannot see each other.

An open network does not have to be unencrypted. Enhanced Open, defined as Opportunistic Wireless Encryption in RFC 8110, encrypts each connection without a password. Use it where your access points and visitors' devices support it. Your centre management team can use Purple Staff WiFi with Microsoft Entra ID, Okta or Google Workspace sign-in, kept apart from guest traffic.

Making return visits automatic

Passpoint, also called Hotspot 2.0, lets a device join a network automatically using a stored profile. OpenRoaming is a federation built on Passpoint. It lets devices join participating networks without a login page. When a returning shopper's phone reconnects on its own, the visit is recorded without another portal step. Your repeat-visit figures become more complete as a result.

Using the hardware you already have

Purple is hardware-agnostic. It runs as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. If a park already has outdoor access points, you can usually keep them. Read Why your next WiFi upgrade doesn't need new hardware before you budget for replacements.

Which footfall and repeat-visit reports matter to tenants and to leasing?

Retail park footfall is usually measured at the car park barrier or by ANPR. Those counts tell you how many vehicles arrived. WiFi visit data adds three things they miss: how long people stayed, which zones they visited and whether they came back.

Reports tenants value

• Visits by hour and day in their zone of the park
• Average dwell time in their zone against the scheme average
• New and returning visitors, month on month
• Event-day visits against a baseline of the same weekday in previous weeks

Tenants use these to plan staff rotas and time promotions. They also show whether a landlord event delivered anything for their unit.

Reports leasing teams use

• Scheme-level visits per month and per year, with the trend
• Repeat-visit rate: the share of visitors seen more than once in a period
• Average visit frequency per returning visitor
• Cross-zone movement: the share of visitors seen in more than one zone
• Home postcode district in aggregate, where visitors gave a postcode at login
• Peak hours by day of the week

A prospective food and beverage tenant wants dwell time near the vacant unit. It also wants to know whether visitors there also visit the anchor store. Repeat-visit rate separates a destination park from a one-trip bulky goods park. These figures carry more weight in a leasing pack than a vehicle count.

What WiFi data can and cannot count

Connected visitors are a sample of everyone on the park. Passive detection of devices that never connect has weakened since phone makers adopted MAC address randomisation. Apple introduced private WiFi addresses in iOS 14. Android uses randomised MAC addresses by default from Android 10.

Treat WiFi figures as trends and ratios. Calibrate absolute totals against ANPR or people counter data. State the method in every report you hand to a tenant or prospective tenant. Our Retail page covers how shopper data supports wider retail operations.

How do you share data with tenants without sharing personal data?

Share aggregates, never records. Under UK GDPR Recital 26, data rendered anonymous so that individuals cannot be identified falls outside data protection law. Counts, rates and averages per zone and time period meet that test when the groups are large enough.

Rules to build into your reporting

• Report at zone and time-period level, never per device or per person.
• Suppress small numbers. Set a minimum cell count, for example 10 visitors, and hide any figure below it. The ICO's anonymisation guidance explains why small groups raise re-identification risk.
• Exclude MAC addresses, email addresses, names and device-level movement paths from every tenant report.
• Show each tenant its own zone against the scheme average. Never show other named tenants' figures.
• Fix the format and the schedule. A monthly report per tenant is enough for most parks.

Put it in the lease

Add a data-sharing schedule to new leases, or a side letter for existing tenants. It should set out what tenants receive, how often, and how they may use it. Include a confidentiality clause that stops onward publication. This prevents a tenant later asking for raw data you cannot lawfully hand over.

Check tenant access in the platform

When you evaluate platforms, confirm that tenant access can be limited to aggregate reports. Confirm that no tenant role can export visitor records. Ask to see this in a demo, not on a slide.

Who owns the visitor list, and how is consent recorded?

You do. The landlord decides why and how visitor data is processed, so the landlord is the controller under UK GDPR Article 4(7). Purple processes the data on your instructions, under a processor contract as Article 28 requires. Tenants do not receive the list.

Why you need consent, not soft opt-in

PECR regulation 22 requires consent before you send marketing emails to individuals. The soft opt-in exception covers contact details obtained during a sale, or negotiations for a sale. Logging in to a landlord's WiFi is neither. Rely on consent for event, scheme news and tenant offer emails.

What valid consent capture looks like

• Keep marketing consent separate from the WiFi terms. Article 7(2) requires a consent request distinguishable from other matters.
• Use an unticked box. Purple calls these conscious-choice opt-ins. Recital 32 makes clear that pre-ticked boxes are not valid consent.
• Name the landlord and say what the emails will cover: events, scheme news and offers from tenants at the park.
• Never make WiFi access conditional on marketing consent. Article 7(4) treats conditional consent as unlikely to be freely given.

What to record for every opt-in

Article 7(1) requires you to demonstrate that each visitor consented. For every opt-in, keep:

• The date and time
• The park and the captive portal version shown
• The exact consent wording
• The login method used
• Any later withdrawal, with its date

Article 7(3) requires withdrawal to be as easy as giving consent. Put an unsubscribe link in every email. Set a retention period for inactive records, in line with the storage limitation principle in Article 5(1)(e).

Tenant offers without passing data

When a tenant wants to reach visitors, you send the email. The tenant supplies the offer and you choose the audience in Purple Engage. The tenant receives aggregate campaign results, never the list. Purple is ISO 27001 and Cyber Essentials certified, GDPR and CCPA compliant, and a certified B Corp.

Where each model fits: worked scenarios

The figures below are illustrative. They show the method and the kind of outcome to measure, not results from a named scheme.

Scenario 1: a 24-unit retail park with a 1,100-space car park

Situation. Each tenant ran its own WiFi inside its unit. The car park, walkways and food kiosks had no coverage. The leasing team's only data was ANPR vehicle entries. Two vacant units sat next to the food kiosks.

What was done. The landlord fitted outdoor access points to 16 lighting columns, each moved to a permanent supply. Wireless bridges linked the three columns furthest from a building. One guest network with a single captive portal replaced the patchwork. The park was split into five reporting zones. ANPR and payment terminals moved to their own VLANs.

Outcome. After 12 months, reports showed average dwell in the food zone of 52 minutes, against a scheme average of 38 minutes. Of visitors seen in the food zone, 41% were also seen at the anchor store. The leasing pack for the vacant units now quotes measured dwell and cross-visit figures, not a vehicle count.

Scenario 2: a summer food market across one weekend

Situation. A centre manager ran a two-day food market in the overflow car park. Tenants funded it through their marketing contribution and wanted proof it had worked.

What was done. The existing outdoor network already covered the overflow area, so it became a sixth reporting zone. Two weeks before the event, the landlord emailed visitors who had opted in. Event-day figures were compared with the average of the previous four Saturdays.

Outcome. Saturday visits rose 27% against the four-Saturday baseline. Returning visitors made up 46% of event-day visits. Each tenant received its own zone figures against the scheme baseline. The marketing contribution for the next event was agreed on the strength of that report.

Scenario 3: a council-owned retail park

Situation. A council property team owned an open-air retail park as an investment asset. The asset manager needed evidence of visitor numbers for the annual asset review.

What was done. The team completed a data protection impact assessment before launch. Article 35(3)(c) requires one for systematic monitoring of a publicly accessible area on a large scale. The privacy notice named the council as controller and Purple as processor. Reports to the property committee used aggregate zone figures only.

Outcome. The committee now receives a quarterly report showing visits, dwell time and repeat-visit rate, with a year-on-year comparison. The asset review uses measured repeat-visit data in place of estimates.

What does retail park WiFi cost to run across a portfolio?

Budget for five cost lines at each park:

• Survey and design. An outdoor survey on a trading day, with a channel plan checked against Ofcom's rules.
• Hardware and installation. Outdoor access points, enclosures, mounting brackets, PoE switches and any wireless bridges. This line shrinks if you keep existing access points.
• Power and backhaul works. Permanent supplies to lighting columns, plus any cabling or trenching.
• Internet connectivity. A business line at each park, sized for event-day peaks.
• Platform and vendor licences. The Purple plan for each park, plus any per-device licences your hardware vendor charges. Cisco Meraki, for example, requires a licence for each device.

Across a portfolio, run every park as a venue under one Purple account. You then see portfolio-level benchmarks and compare parks on the same measures. Purple's plans are Connect, Capture and Engage. Ask for a quote that sets each park on the plan it needs. A small park may only need connection and reporting, while a park that runs events needs Engage. Purple's platform runs at 99.999% uptime (Purple's own data).

Check whether your leases let you recover shared-area WiFi costs through the service charge. The RICS professional statement on service charges in commercial property sets the standard most managing agents follow. Lease terms decide what is recoverable.

If you are replacing an existing provider, sequence the move park by park. Our guide Switching guest WiFi providers: a migration checklist for multi-site venues covers the order of work.

How to decide for your estate

Map each park to the situation that fits it best.

Your situation	What to deploy
Single park, no shared-space coverage, vacant units to let	Shared guest network with zone reports; add Engage when you start running events
Portfolio of parks with mixed hardware	One platform across all parks as a cloud overlay on the hardware already installed
Outdoor access points in place, provider you want to replace	Keep the hardware, migrate the platform park by park
Park that runs four or more events a year	Shared guest network plus Engage for the consented visitor list
Council-owned or public-sector park	Shared guest network, DPIA completed before launch, aggregate reports only
Bulky goods park with short, planned visits	Shared guest network with repeat-visit and peak-hour reports for leasing

Before you shortlist, answer five questions for each park:

1. Which mounting points have a permanent power supply?
2. Can you run cable to every access point, or do you need wireless bridges?
3. Which zones will you report on, and what minimum count will you suppress below?
4. Does your lease or a side letter cover what tenants receive?
5. Who signs off the consent wording and the retention period?

Frequently asked questions

Does Purple work with the outdoor access points we already have?

Yes, in most cases. Purple is hardware-agnostic and runs as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. If your parks already have outdoor access points from these vendors, you keep them and change the platform. Ask your installer to confirm firmware levels and vendor licences before migration. Check for coverage gaps in the car park at the same time.

How is retail park WiFi priced across a portfolio of parks?

You pay for three things: hardware and installation at each park, internet connectivity at each park, and the platform licence. Purple's plans are Connect, Capture and Engage. Ask for a portfolio quote that sets each park on the plan it needs and runs every park under one account. Check whether your leases let you recover shared-area costs through the service charge.

Can tenants see the names or emails of visitors to the park?

No. Tenants receive aggregate reports only: visits, dwell time and repeat-visit rates for their zone, compared with the scheme average. The visitor list belongs to the landlord as controller, and Purple processes it under a processor contract. If a tenant wants to reach visitors, the landlord sends the email to consented visitors. The tenant receives aggregate campaign results.

Is WiFi visit data reliable enough for a leasing pack?

Yes, for trends and ratios such as dwell time, repeat-visit rate and cross-zone movement. Connected devices are a sample of all visitors. MAC address randomisation on iOS and Android also weakens passive counts of devices that never connect. Calibrate absolute totals against car park ANPR or people counter data, and state the method in every pack you send to a prospective tenant.

Do we need consent to email visitors about events at the park?

Yes. PECR regulation 22 requires consent for marketing emails to individuals, and the soft opt-in does not cover a WiFi login at a landlord's scheme. Capture consent with an unticked box, separate from the WiFi terms. Name the landlord and describe the emails. Record the date, park and wording shown, and include an unsubscribe link in every email.

Can we switch guest WiFi provider without replacing hardware?

Usually, yes. Because Purple runs as a cloud overlay, switching is mainly a change of authentication, captive portal and reporting rather than a hardware project. Review the consent wording behind any visitor records before you import them, because older wording may not cover your planned emails. Our migration checklist for multi-site venues covers the sequence park by park.

Is an open guest network in a car park secure?

Yes, when you apply three controls. Put guest traffic on its own VLAN, away from CCTV, ANPR and payment systems. Enable client isolation so visitor devices cannot see each other. Use Enhanced Open (RFC 8110) where your access points and visitors' devices support it, which encrypts each connection without a password. Purple is ISO 27001 and Cyber Essentials certified.

What happens to the visitor list if we sell a park?

The list stays with you as controller unless you transfer it, and any transfer must match what visitors were told. State in your privacy notice that consent is given to the landlord of the named park. Explain what happens to the data on a sale. Take legal advice on each disposal, and remove that park's records from portfolio campaigns once it leaves your ownership.