Skip to main content

How to leverage SMS marketing for business to increase return visits

This guide details how venue operators can use existing Guest WiFi infrastructure to capture verified phone numbers and deploy automated SMS marketing campaigns. It covers the technical architecture, GDPR compliance requirements, and specific implementation steps needed to drive return visits across retail and hospitality environments.

📖 4 min read📝 902 words🔧 2 worked examples3 practice questions📚 8 key definitions

Listen to this guide

View podcast transcript
Welcome to the Purple Technical Briefing series. Today we're covering a topic that sits right at the intersection of your WiFi infrastructure and your marketing revenue: SMS marketing for business, and specifically how to use it to drive return visits to your venue. [medium pause] If you're a marketing director, a CRM manager, or you run operations at a hotel, retail chain, or stadium, this is directly relevant to your next quarter. We'll cover the architecture, the compliance requirements, the implementation steps, and the numbers you should expect. [short pause] Let's get into it. [medium pause] First, the context. SMS marketing achieves a 98% open rate. That's not a typo. Ninety-eight percent. Email, by comparison, sits at around 20 to 28 percent. And 90% of SMS messages are read within three minutes of delivery. The average return on investment for SMS marketing sits at around 71 dollars for every dollar spent, according to Infobip's 2026 messaging trends data. That's a 7,100% ROI. [short pause] So why aren't more venue operators using it effectively? The answer is almost always the same: data quality. You can't run SMS campaigns without verified phone numbers. And most venues are sitting on a goldmine of visitor data that they're not capturing correctly. [medium pause] This is where Guest WiFi becomes your most important marketing asset. [short pause] Here's how the architecture works. When a visitor connects to your Guest WiFi network, they pass through a Captive Portal - that's the login page they see before they get internet access. At that point, you have a conscious-choice opt-in moment. The visitor enters their phone number and email address, ticks a box confirming they consent to receive marketing communications, and connects. That data is verified - it's a real number attached to a real person who is physically in your venue right now. [short pause] Purple Engage captures that data at the point of login and feeds it directly into your CRM. Across our 80,000-plus live venues, we've processed 440 million logins in 2024 alone. That's 440 million verified data points, each one a potential SMS marketing contact. [medium pause] Now let's talk about the technical implementation in more detail. [short pause] The first component is your WiFi hardware. Purple operates as a cloud overlay on top of your existing infrastructure. Whether you're running Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, or Ubiquiti UniFi, the Purple platform sits above the hardware layer and manages the Captive Portal experience. You don't need to rip and replace anything. [short pause] The second component is the Captive Portal itself. This is where the opt-in happens. GDPR and the UK's Privacy and Electronic Communications Regulations - PECR - require explicit, informed consent before you can send marketing SMS messages. The consent must be granular: the visitor needs to understand they're opting in to SMS marketing specifically, not just agreeing to terms of service. Purple's splash page templates are pre-built to meet these requirements, with separate tick boxes for email and SMS consent. [short pause] The third component is audience segmentation. Once you have phone numbers in your database, you segment them. First-time visitors get a different message to repeat visitors. Visitors who haven't returned in 30 days get a win-back message. VIP customers - those who've visited five or more times - get exclusive early access offers. Purple Engage automates this segmentation based on visit frequency, dwell time, and time since last visit. [short pause] The fourth component is the trigger logic. This is where the automation earns its keep. You define the rules: if a visitor hasn't returned within 14 days, send a re-engagement SMS. If a visitor connects on a Friday, send a weekend offer. If a visitor's birthday is this month, send a personalised discount. These triggers fire automatically, without any manual intervention from your team. Let me give you two concrete examples of this working in practice. [short pause] First, a hotel scenario. A 150-room property was capturing guest email addresses through Guest WiFi but not phone numbers. They added a phone number field to their Captive Portal with explicit SMS consent. Within 90 days, they had 2,400 verified phone numbers. They set up a single automated trigger: any guest who checked out and hadn't made a new booking within 21 days received an SMS with a direct booking link and a 10% return discount. The campaign achieved a 34% click-through rate and generated 180 direct bookings in the first quarter - revenue that would otherwise have gone through an OTA at 15 to 25% commission. [short pause] Second, a retail scenario. A fashion retailer with 12 stores was running email campaigns with a 22% open rate. They added SMS to their Guest WiFi capture flow. Within six months, they had built an SMS list of 18,000 opted-in shoppers. They ran a flash sale campaign - a single SMS sent at 10am on a Saturday morning. By 2pm, footfall across all 12 stores was up 28% compared to the same Saturday the previous month. The message was 147 characters. The campaign cost less than 200 pounds to send. [medium pause] Now let's talk about the pitfalls, because there are several ways to get this wrong. [short pause] The most common mistake is treating SMS like email. Email can be long, rich, and image-heavy. SMS cannot. Your message needs to be under 160 characters to avoid being split into multiple segments, which increases cost and looks unprofessional. Get to the point in the first sentence. Include one clear call to action. Include your brand name at the start so the recipient knows immediately who's messaging them. [short pause] The second mistake is sending too frequently. SMS is intimate - it lands in the same place as messages from family and friends. If you send more than four messages per month to the same contact, opt-out rates climb sharply. Industry data suggests two to three messages per month is the optimal frequency for most venue operators. [short pause] The third mistake is ignoring the compliance requirements. Under GDPR, you must be able to demonstrate consent for every contact in your list. You need a clear opt-out mechanism in every message - typically Reply STOP to unsubscribe. You must process opt-outs within 24 hours. And you must not send messages between 9pm and 8am. Purple's platform handles all of this automatically, but if you're building a custom integration, these are non-negotiable. [short pause] The fourth mistake is not measuring correctly. The metrics that matter for SMS are: delivery rate, which should be above 95%; click-through rate, which should be above 15% for a well-segmented list; opt-out rate, which should be below 2%; and revenue attributed, which you track by giving each campaign a unique UTM parameter or a unique discount code. [medium pause] Now, a rapid-fire round of the questions we hear most often. [short pause] Do I need a dedicated short code? For most venue operators, a shared short code or a long number works fine for campaigns under 10,000 messages per month. If you're sending at scale, a dedicated short code improves deliverability and brand recognition. [short pause] Can I send SMS internationally? Yes, but the regulations vary significantly by country. The UK operates under GDPR and PECR. The US operates under the Telephone Consumer Protection Act - TCPA. Always check local regulations before sending cross-border campaigns. [short pause] What's the difference between a promotional SMS and a transactional SMS? Transactional messages - booking confirmations, receipts, alerts - don't require marketing consent. Promotional messages - offers, discounts, re-engagement campaigns - do. Keep these lists separate. [short pause] How do I integrate SMS with my existing CRM? Purple Engage integrates with major CRM platforms via API. If you're running Salesforce, HubSpot, or a custom system, the phone numbers and consent flags export via webhook or CSV, and you can feed them directly into your existing campaign tooling. [medium pause] To wrap up. Three things to take away from this briefing. [short pause] One: your Guest WiFi is a data capture asset. If you're not collecting verified phone numbers at login with explicit SMS consent, you're leaving revenue on the table. Start there. [short pause] Two: SMS outperforms email on every engagement metric that matters - open rate, read time, click-through rate, and ROI. It belongs in your marketing mix alongside email, not instead of it. [short pause] Three: compliance is not optional. GDPR, PECR, and TCPA have teeth. Build your opt-in flow correctly from day one. Purple's platform is ISO 27001 certified, GDPR compliant, and CCPA compliant - the consent architecture is built in. [short pause] The full technical guide is available at purple.ai. You can also explore our guide on SMS marketing best practices, which covers message templates, timing strategies, and A/B testing frameworks in detail. Thanks for listening.

header_image.png

Executive summary

SMS marketing achieves a 98% open rate and a 7100% ROI, yet many venue operators struggle to implement it effectively due to poor data quality. This guide outlines how to use your existing Guest WiFi infrastructure to capture verified phone numbers at the point of login, ensuring GDPR compliance and high data accuracy. By integrating Purple Engage with hardware from Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, or Fortinet, you can automate segmented SMS campaigns that drive return visits. We will cover the technical deployment architecture, compliance requirements, and specific trigger logic used by operators like Premier Inn and McDonald's to increase footfall.

Technical deep-dive

The foundation of effective SMS marketing for business is verified first-party data. When a visitor connects to your Guest WiFi, they pass through a captive portal. This presents a conscious-choice opt-in moment. The Purple cloud overlay manages this portal, regardless of your underlying hardware.

The data capture flow

The architecture relies on a seamless transition from network access to CRM entry:

  1. Network connection: The device associates with the Guest WiFi SSID.
  2. Captive portal interception: The hardware controller redirects HTTP traffic to the Purple splash page.
  3. Authentication and consent: The visitor provides their phone number and explicitly ticks a box consenting to SMS marketing. This satisfies GDPR and PECR requirements in the UK.
  4. Data validation: Purple verifies the format of the phone number and logs the MAC address, timestamp, and location data.
  5. CRM synchronisation: The verified profile enters the Purple Engage database, ready for segmentation.

sms_campaign_architecture.png

Identity-Based Networks

This approach shifts the focus from managing devices (MAC addresses) to managing known identities. By linking a verified phone number to a device MAC address, Purple Engage can track subsequent visits automatically. When the device is seen again, the platform logs a return visit without requiring the user to log in again, providing accurate frequency data for SMS triggers.

Implementation guide

Deploying an automated SMS marketing system requires careful configuration of both the network layer and the marketing automation platform.

Step 1: Configure the captive portal

Your splash page must be optimised for data capture while maintaining a fast connection experience.

  • Add a mandatory phone number field to the login form.
  • Include a separate, unticked checkbox for SMS marketing consent. Do not bundle this with the general terms and conditions.
  • Clearly state the frequency of messages (e.g., "Maximum 2 messages per month").

Step 2: Define audience segments

Do not send broadcast messages to your entire database. Segment your audience based on behaviour:

  • First-time visitors: Users with exactly one recorded visit.
  • Repeat visitors: Users with two to four visits.
  • VIPs: Users with five or more visits.
  • Lapsed visitors: Users who have not connected to the network in the last 30 days.

Step 3: Configure automated triggers

Set up automated campaigns in Purple Engage based on the segments defined above.

  • The win-back trigger: If a visitor has not returned in 21 days, send a re-engagement SMS with a time-limited offer.
  • The VIP reward: When a visitor logs their fifth visit, trigger an SMS thanking them for their loyalty with an exclusive discount.

Best practices

To maximise the effectiveness of your SMS marketing for business, adhere to these standards:

  • Keep it brief: SMS messages are limited to 160 characters. Get to the point immediately.
  • Include your brand name: Always start the message with your brand name so the recipient knows who is contacting them.
  • Clear call to action: Include a single, trackable link.
  • Respect frequency limits: Send a maximum of two to three promotional messages per month to avoid high opt-out rates.
  • Timing matters: Do not send messages between 21:00 and 08:00. Mid-morning or mid-afternoon typically yields the highest engagement.

sms_vs_email_comparison.png

Troubleshooting and risk mitigation

Implementing SMS marketing carries specific compliance and operational risks.

Compliance failures

The most significant risk is violating GDPR or PECR. You must maintain an auditable record of consent for every phone number. Ensure every SMS includes a clear opt-out mechanism (e.g., "Reply STOP to unsubscribe"). Purple Engage automatically processes these opt-outs and updates the user profile to prevent future messages.

High opt-out rates

If your opt-out rate exceeds 2%, your messaging is either too frequent or irrelevant. Review your segmentation logic and ensure your offers provide genuine value. A 10% discount on a high-margin item is more effective than a generic newsletter update.

Poor data quality

If visitors enter fake phone numbers to access the WiFi, your delivery rates will drop. To mitigate this, implement SMS verification during the login process, where the user must enter a code sent to their device before gaining internet access. While this adds friction, it guarantees 100% data accuracy.

ROI and business impact

The primary metric for success is the return visit rate. By tracking the number of visitors who receive an SMS and subsequently reconnect to the Guest WiFi within a specified window, you can accurately measure the campaign's impact on footfall.

For example, a 150-room hotel implemented a 21-day win-back SMS trigger. Over 90 days, the campaign achieved a 34% click-through rate and generated 180 direct bookings, bypassing OTA commissions of 15% to 25%.

Listen to our technical briefing podcast for a deeper dive into the architecture and implementation strategies:

Key Definitions

Captive portal

The web page that a user must interact with before gaining access to a public WiFi network.

This is the primary data capture point for building an SMS marketing database.

Identity-Based Networks

A network architecture that associates device MAC addresses with verified user identities (like a phone number).

This allows venue operators to track return visits and trigger behavioural SMS campaigns without requiring users to log in repeatedly.

First-party data

Information a company collects directly from its customers and owns entirely.

Guest WiFi captures high-quality first-party data, reducing reliance on third-party advertising platforms.

Conscious-choice opt-in

The requirement that a user actively agrees to receive marketing communications, typically by ticking an empty checkbox.

This is a fundamental requirement for GDPR and PECR compliance when running SMS marketing campaigns.

MAC address

A unique identifier assigned to a network interface controller.

Purple uses the MAC address to recognise returning devices and measure the success of SMS campaigns by tracking subsequent network connections.

Automated trigger

A rule set in a marketing platform that automatically sends a message when a specific condition is met.

Triggers based on dwell time or days since last visit ensure SMS messages are relevant and timely.

PECR

Privacy and Electronic Communications Regulations. The UK law that governs electronic marketing, including SMS.

Venue operators must comply with PECR alongside GDPR to avoid significant fines.

Cloud overlay

A software platform that operates on top of existing physical network hardware.

Purple functions as a cloud overlay, meaning venues do not need to replace their Cisco Meraki or HPE Aruba access points to implement SMS data capture.

Worked Examples

A 150-room hotel property is capturing guest email addresses through Guest WiFi but not phone numbers, resulting in low engagement with win-back campaigns.

The hotel added a phone number field to their captive portal with explicit SMS consent. They configured Purple Engage to trigger an automated SMS to any guest who checked out and had not made a new booking within 21 days. The SMS included a direct booking link and a 10% return discount.

Examiner's Commentary: This approach uses existing infrastructure to build a high-quality marketing database. By automating the trigger based on network absence (21 days since last connection), the hotel delivers a highly relevant message exactly when the guest might be considering their next trip. The campaign achieved a 34% click-through rate and generated 180 direct bookings in the first quarter.

A fashion retailer with 12 stores wants to increase weekend footfall using their database of 18,000 opted-in shoppers.

The retailer used Purple Engage to send a single broadcast SMS at 10:00 on a Saturday morning, announcing a weekend flash sale. The message was 147 characters and included a trackable link.

Examiner's Commentary: SMS is ideal for time-sensitive promotions due to its 90% read rate within three minutes. By keeping the message under 160 characters, the retailer avoided split-message costs. Footfall across all 12 stores increased by 28% compared to the previous month, demonstrating the immediate impact of targeted SMS marketing.

Practice Questions

Q1. A retail venue wants to start SMS marketing and plans to add a pre-ticked consent box to their WiFi login page to maximise list growth. Is this advisable?

Hint: Consider the requirements of GDPR and PECR regarding explicit consent.

View model answer

No. Under GDPR and PECR, consent must be freely given, specific, informed, and unambiguous. Pre-ticked boxes do not constitute valid consent. The venue must use an unticked box that requires a conscious choice from the user to opt in.

Q2. You have segmented your database and want to send a broadcast SMS to 10,000 lapsed visitors. The message text is 185 characters long. What is the technical implication?

Hint: Consider the standard character limit for a single SMS message.

View model answer

The message exceeds the 160-character limit for a single SMS. It will be split into two segments and concatenated on the recipient's device. This will double the sending cost for the campaign. The message should be edited down to 160 characters or fewer.

Q3. A hotel wants to measure the exact ROI of an SMS campaign designed to drive food and beverage sales in their restaurant. How should they configure the campaign?

Hint: Consider how to track the transition from receiving the digital message to making a physical purchase.

View model answer

The hotel should include a unique, trackable discount code in the SMS (e.g., 'Show this text for 15% off dinner'). When the code is redeemed at the restaurant's point of sale, the revenue can be directly attributed to the SMS campaign, providing an accurate ROI calculation.