Skip to main content

How to leverage SMS campaigns for marketing to increase return visits

This guide explains how venue operators can build compliant SMS marketing campaigns using Guest WiFi data to drive measurable increases in return visits. It covers the technical architecture for capturing verified phone numbers, segmentation strategies, and the legal requirements under GDPR and PECR.

📖 5 min read📝 1,095 words🔧 2 worked examples3 practice questions📚 8 key definitions

Listen to this guide

View podcast transcript
Speak in British English with a confident, authoritative, and conversational tone - like a senior consultant briefing a client. Measured pace, clear diction, professional but not stiff. Occasional natural pauses for emphasis: Welcome to the Purple technical briefing series. Today we are talking about SMS campaigns for marketing - specifically, how venue operators can use them to drive measurable increases in return visits. Whether you run a hotel chain, a retail portfolio, a stadium, or a conference centre, the principles here apply directly to your operation. Let's get into it. [medium pause] First, some context. Physical venues have a data problem. Millions of guests walk through your doors every year, and most of them leave as strangers. You know they visited. You might know roughly when. But you have no verified way to reach them afterwards. That is a significant commercial gap. SMS campaigns for marketing close that gap - but only if you have the right data infrastructure underneath them. That infrastructure starts at the WiFi login. [medium pause] Here is how it works. When a guest connects to your Guest WiFi through Purple's captive portal, they authenticate using their phone number. Purple sends a one-time passcode via SMS to verify the number is real. The guest enters the code, connects, and - critically - has opted in to receive future communications from your venue. That single interaction gives you a verified, consent-compliant phone number tied to a specific visit, a specific location, and a specific timestamp. That is first-party data. And it is the foundation of every effective SMS campaign. [medium pause] Now, why SMS rather than email? The numbers are stark. SMS open rates sit at 98%, compared to 20 to 28% for email. Ninety percent of messages are read within three minutes of delivery. Click-through rates for triggered SMS campaigns reach 36%, versus roughly 6% for email. And the ROI figures are extraordinary - industry data from Forbes puts average SMS marketing returns at 71 dollars for every dollar spent. These are not marginal improvements. They are a different category of channel performance. [medium pause] But here is what separates the venues that see those returns from the ones that do not: segmentation and timing. A generic broadcast SMS to your entire database will underperform every time. The campaigns that drive return visits are triggered, personalised, and timed to the guest's actual behaviour. [medium pause] Let me walk you through the three campaign types that consistently move the needle on return visits. [medium pause] The first is the post-visit follow-up. A guest connects to your WiFi, spends time in your venue, and leaves. Twenty-four to 48 hours later, they receive a personalised SMS. Something like: "Thanks for visiting us yesterday. Here is 15% off your next visit, valid for the next 30 days." This message is relevant because it references a real, recent interaction. It is timely because the guest's experience is still fresh. And it creates a specific, time-bounded reason to return. Purple's platform data shows this campaign type alone drives a 24% average increase in return visits across our 80,000-plus live venues. [medium pause] The second is lapsed visitor re-engagement. Purple's WiFi Analytics tracks visit frequency per individual. When a guest who previously visited weekly has not appeared for 45 days, that is a signal. An automated SMS fires: "We have not seen you in a while. Come back this week and enjoy a complimentary upgrade." You are not guessing who to target. You are using actual visit behaviour data to identify guests at risk of churning, and intervening before they are gone for good. [medium pause] The third is event and promotion-based campaigns. A hotel running a spa weekend promotion can segment its SMS list by guests who have previously used the spa. A stadium can target fans who attended last season but have not renewed. A retail chain can push a flash sale to shoppers who visited a specific location in the last 90 days. The segmentation logic sits inside Purple Engage, which integrates with over 400 CRM and marketing connectors. You define the audience once, and the platform automates the sends. [medium pause] Now, let's talk about the architecture. Purple operates as a cloud overlay on your existing WiFi hardware. We are hardware-agnostic, which means the platform works across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, and Fortinet. You do not need to rip and replace your network infrastructure. Purple sits on top, captures the guest data at login, and feeds it into the Engage marketing engine. [medium pause] The captive portal is where phone number capture happens. When a guest selects SMS authentication, they enter their mobile number. Purple's gateway sends a verification OTP - a one-time passcode. The guest enters the code to connect. This OTP step does two things simultaneously: it verifies the number is real and active, and it creates a documented consent record. That consent record is what makes subsequent SMS marketing legally compliant under GDPR and PECR - the Privacy and Electronic Communications Regulations that govern SMS marketing in the UK and EU. [medium pause] Speaking of compliance - this is where a lot of venues trip up. GDPR and PECR require explicit, specific, freely given consent for SMS marketing. The consent must be separate from the WiFi access itself. You cannot make SMS opt-in a condition of connecting. Purple's captive portal handles this correctly by design: the opt-in checkbox is clearly labelled, separate from the connect button, and the consent record is timestamped and stored. Every contact in your SMS list has a documented legal basis. That is not just good practice - it is a legal requirement under UK GDPR Article 6 and PECR Regulation 22. [medium pause] Let me give you two concrete implementation scenarios. [medium pause] Scenario one: a 250-room hotel. The property runs Purple Engage on an HPE Aruba network. Guests authenticate via SMS OTP at login. Over 12 months, the hotel builds a verified database of 18,000 unique guest phone numbers. They run three automated campaigns: a post-checkout follow-up with a return booking offer, a lapsed guest re-engagement at 60 days, and a seasonal promotion to guests who visited the same period last year. The result: a 31% increase in direct bookings from repeat guests, reducing OTA commission costs by an estimated 140,000 pounds annually. The SMS list became a direct revenue channel. [medium pause] Scenario two: a 12-site retail chain. Each site runs Purple on Cisco Meraki hardware. Shoppers who connect to Guest WiFi and opt in to SMS receive a post-visit message with a personalised offer based on the product category they browsed - inferred from dwell time in specific zones tracked via WiFi Analytics. Lapsed shoppers who have not visited in 30 days receive a re-engagement SMS with a time-limited discount. Across the estate, the chain sees a 19% uplift in repeat visit frequency and a 23% increase in average transaction value among SMS subscribers, consistent with industry data showing SMS subscribers convert at 40% higher rates than non-subscribers. [medium pause] Now, the common pitfalls. First: list quality. An SMS list built on unverified numbers is worthless. Purple's OTP verification step eliminates this problem at source. Second: frequency. Sixty-one percent of SMS unsubscribes are caused by too many messages. The rule of thumb is no more than four to six SMS messages per month per contact, with clear relevance to each send. Third: timing. Avoid sending before 9am or after 8pm local time. Midday sends - 11am to 2pm - consistently outperform morning and evening sends. Fourth: missing UTM tracking. Every link in an SMS campaign should carry UTM parameters so you can attribute return visits and revenue back to the specific campaign in your analytics platform. [medium pause] Rapid-fire questions. Can SMS campaigns work without a loyalty programme? Yes. The WiFi login is the opt-in mechanism. You do not need a loyalty app. Does SMS replace email? No. They work best together. Email for longer-form content and pre-arrival communications, SMS for time-sensitive triggers. What is a realistic list growth rate? Venues typically see 15 to 25% of WiFi users opt in to SMS. A venue with 500 daily connections can build a list of 20,000 to 30,000 verified numbers within six months. What hardware do I need? None beyond your existing WiFi infrastructure. Purple is a cloud overlay. [medium pause] To summarise. SMS campaigns for marketing are the highest-ROI channel available to physical venues - but only when built on verified, consent-compliant first-party data. Purple Engage captures that data at the WiFi login, automates the campaign triggers, and integrates with your existing CRM stack. The three campaign types that drive return visits are post-visit follow-ups, lapsed visitor re-engagement, and event-based promotions. Compliance under GDPR and PECR is non-negotiable and is handled by design within Purple's captive portal. And the numbers speak for themselves: 98% open rates, 24% return visit uplift, and ROI that consistently outperforms every other direct marketing channel. [medium pause] If you want to see how this works in your specific venue environment, speak to a Purple expert. We will map the architecture against your existing hardware and show you projected returns based on your current footfall data. The link is in the guide. Thanks for listening.

header_image.png

Executive summary

Physical venues face a persistent data gap. Millions of visitors walk through your doors annually, yet most leave without providing a reliable way to reach them again. SMS campaigns for marketing solve this problem by converting anonymous foot traffic into a verified, reachable audience.

This guide details how to build the data infrastructure required for effective SMS marketing. It explains how to capture verified phone numbers at the WiFi login, store consent records securely, and deploy automated campaigns that drive return visits. The technical approach focuses on using Purple Engage as a cloud overlay across your existing network hardware to create a compliant, high-ROI marketing channel.

Listen to the technical briefing podcast:

Technical deep-dive: the data capture architecture

The foundation of any SMS campaign is a verified, compliant contact list. Capturing this data requires a seamless integration between your network infrastructure and your marketing platform.

Purple operates as a hardware-agnostic cloud overlay. It integrates with enterprise network controllers including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, and Fortinet. This architecture allows you to deploy Guest WiFi data capture across multiple sites without replacing your underlying access points or switches.

When a guest attempts to connect to the network, the hardware controller redirects them to a Purple-hosted captive portal. If the guest selects SMS authentication, the system prompts them for their mobile number. Purple's gateway then transmits a one-time passcode (OTP) to that number. The guest must enter this OTP to gain network access.

This OTP verification step serves two critical functions. First, it ensures the phone number is active and belongs to the user, eliminating the bounce rates associated with fake data. Second, it creates a definitive, timestamped consent record when the guest ticks the opt-in box. This record forms the legal basis for your subsequent SMS campaigns for marketing.

sms_campaign_architecture.png

Implementation guide: deploying automated campaigns

Once you have established the data capture infrastructure, the next phase is deploying the campaigns. A generic broadcast SMS will underperform. The campaigns that drive return visits are triggered by specific guest behaviours.

1. Post-visit follow-ups

The most effective SMS campaign triggers 24 to 48 hours after a guest leaves your venue. Purple's WiFi Analytics tracks the device's MAC address to determine the duration of the visit and the departure time. The Engage platform then automatically sends a personalised SMS offering an incentive to return.

For example, a guest visits a restaurant within a Hospitality portfolio. The following day, they receive an SMS offering a complimentary dessert on their next visit within 30 days. Purple platform data shows this specific triggered campaign drives a 24% average increase in return visits.

2. Lapsed visitor re-engagement

You must identify guests who are at risk of churning. The analytics engine tracks individual visit frequencies. You can configure a rule in Purple Engage to trigger an SMS when a guest deviates from their usual pattern.

If a shopper typically visits a Retail location every fortnight but has not appeared for 45 days, the system fires a re-engagement SMS. This message might include a time-limited discount to prompt an immediate return.

3. Segmented event promotion

When promoting an event, use historical location data to target the right audience. A stadium operator can segment their database to isolate fans who attended specific fixtures last season. They can then send a targeted SMS campaign to drive ticket sales for similar upcoming events, avoiding the fatigue caused by irrelevant mass messaging.

sms_benchmarks_chart.png

Best practices for SMS marketing

To maximise the return on your SMS campaigns, you must adhere to specific operational standards.

Optimise send times. Do not send SMS messages outside of normal waking hours. Midday sends between 11:00 and 14:00 local time consistently generate the highest engagement rates.

Control frequency. The primary reason consumers unsubscribe from SMS lists is excessive messaging. Limit your campaigns to a maximum of four to six messages per month per contact.

Implement UTM tracking. You must append UTM parameters to every link in your SMS campaigns. This allows your analytics platform to attribute website traffic and subsequent conversions directly to the SMS channel, proving the ROI.

Design for mobile. Ensure any landing page linked from an SMS is fully responsive and loads quickly on mobile devices. A high click-through rate is useless if the destination page causes the user to abandon the session.

For further reading on network design to support these initiatives, review our guide on Three SSIDs to rule them all: guest, Passpoint, and IoT WiFi .

Troubleshooting and risk mitigation

The most significant risk in SMS marketing is regulatory non-compliance. In the UK and EU, SMS marketing is governed by the General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR).

You must obtain explicit, freely given consent before sending marketing messages. You cannot make SMS opt-in a mandatory condition for accessing the Guest WiFi. The captive portal must present a clear, unticked checkbox for marketing consent, separate from the terms and conditions acceptance.

Purple's platform handles this compliance by design. The system stores a secure, timestamped record of every opt-in, providing a clear audit trail. Furthermore, every SMS sent through the Engage platform automatically includes a compliant opt-out mechanism, such as a "Reply STOP" instruction.

Another common failure mode is poor list hygiene. If you bypass the OTP verification step, your database will fill with invalid numbers. This increases your messaging costs and damages your sender reputation with the telecommunications carriers. Always enforce OTP verification at the point of capture.

If you are managing authentication across multiple sites, you may also find value in our comprehensive resource: Server RADIUS: a comprehensive guide for businesses .

ROI and business impact

SMS campaigns for marketing represent one of the highest-ROI channels available to venue operators. Industry benchmarks indicate an average return of $71 for every $1 spent on SMS marketing.

This high return is driven by the exceptional engagement metrics. SMS achieves open rates of 98%, compared to 20 to 28% for email. Furthermore, 90% of text messages are read within three minutes of delivery. Click-through rates for triggered campaigns typically range from 19% to 36%.

When a venue deploys Purple Engage to automate these campaigns, the impact on return visits is measurable. By capturing verified first-party data at the WiFi login and triggering personalised SMS messages based on actual visit behaviour, venues consistently see a 24% uplift in return visits. This direct correlation between network infrastructure and marketing revenue transforms Guest WiFi from an IT cost centre into a commercial asset.

Key Definitions

Captive portal

A web page that a user must view and interact with before accessing a public WiFi network. It is the primary interface for data capture and authentication.

IT teams configure the captive portal to manage network access, while marketing teams use it to collect first-party data and secure marketing consent.

OTP (One-Time Passcode)

A unique, temporary numeric code sent via SMS to verify a user's phone number during the authentication process.

Essential for ensuring the accuracy of the CRM database and preventing users from submitting fake phone numbers to gain network access.

First-party data

Information a company collects directly from its customers or visitors, rather than purchasing it from external sources.

Capturing verified phone numbers via Guest WiFi provides high-quality first-party data, reducing reliance on third-party advertising platforms.

PECR

The Privacy and Electronic Communications Regulations. The UK legislation that sits alongside the GDPR and specifically governs electronic marketing, including SMS.

Venue operators must comply with PECR requirements, ensuring they have explicit consent before sending SMS campaigns for marketing.

Triggered campaign

An automated marketing message sent in response to a specific user action or behaviour, rather than on a fixed schedule.

Sending an SMS 24 hours after a guest leaves a venue is a triggered campaign, offering higher relevance and conversion rates than mass broadcasts.

Cloud overlay

A software platform that integrates with and manages existing hardware infrastructure from the cloud, without requiring physical equipment replacement.

Purple operates as a cloud overlay, allowing venues to deploy advanced WiFi analytics and marketing tools across diverse hardware environments like Cisco Meraki and HPE Aruba.

MAC address

A unique identifier assigned to a network interface controller. Used by WiFi analytics platforms to identify individual devices.

Allows the system to track visit frequency and dwell time, enabling behavioural segmentation for targeted SMS campaigns.

Hardware-agnostic

Software designed to function correctly across multiple different hardware platforms or vendors.

Purple's hardware-agnostic design means a retail chain can deploy a unified SMS marketing strategy even if different stores use different WiFi access points.

Worked Examples

A 250-room hotel needs to increase direct bookings from repeat guests to reduce OTA commission costs. They currently offer free WiFi but do not capture verified guest data.

The hotel deploys Purple Engage over their existing HPE Aruba network. They configure the captive portal to require SMS OTP authentication for Guest WiFi access, with a clear, optional checkbox for marketing consent. Over 12 months, they build a database of 18,000 verified phone numbers. They configure an automated campaign in Purple Engage to send an SMS 24 hours after checkout, offering a 15% discount on the guest's next direct booking. They also configure a lapsed-guest campaign triggering at 60 days.

Examiner's Commentary: This approach directly addresses the commercial objective. By capturing verified data at the point of highest intent (WiFi login) and automating the follow-up, the hotel creates a direct revenue channel. The OTP verification ensures the database is accurate, and the automated triggers ensure the messaging is timely and relevant, driving a measurable increase in return visits.

A 12-site retail chain wants to drive foot traffic during quiet mid-week periods. They have a database of customer phone numbers but suffer from high unsubscribe rates when they send broadcast promotions.

The chain integrates their Cisco Meraki network with Purple Engage. Instead of broadcasting generic offers, they use WiFi Analytics to segment their audience based on previous visit behaviour. They identify shoppers who previously visited on Tuesdays or Wednesdays but have not returned in the last 30 days. They send a targeted SMS campaign on Tuesday morning offering a time-limited discount valid only for mid-week purchases.

Examiner's Commentary: This solution shifts the strategy from mass broadcasting to behavioural segmentation. By targeting only the shoppers who have demonstrated a propensity for mid-week visits, the chain increases the relevance of the message. This approach improves conversion rates while simultaneously reducing the fatigue that causes high unsubscribe rates.

Practice Questions

Q1. A venue operator wants to increase their SMS database quickly. They propose removing the OTP verification step from the captive portal to reduce friction during login. What is the primary risk of this approach?

Hint: Consider the impact on data quality and future campaign costs.

View model answer

Removing the OTP verification step will severely degrade the quality of the database. Guests will frequently enter fake or incorrect phone numbers to bypass the login screen quickly. This results in a high bounce rate for future SMS campaigns, wasting marketing spend and potentially damaging the venue's sender reputation with telecommunications carriers. The minor increase in login friction from OTP is necessary to ensure the captured data is verified and commercially useful.

Q2. A marketing director plans to send a promotional SMS to the entire database of 50,000 contacts captured via Guest WiFi over the past two years. The message will be sent at 08:00 on a Monday morning. Identify two critical flaws in this plan.

Hint: Evaluate the segmentation strategy and the chosen send time.

View model answer

The first flaw is the lack of segmentation. Sending a generic broadcast message to a two-year-old database will result in low relevance, poor conversion rates, and a high volume of unsubscribes. The campaign should be segmented based on recent visit behaviour. The second flaw is the timing. Sending an SMS at 08:00 on a Monday is intrusive and likely to annoy recipients. Industry best practice dictates sending messages during midday hours (11:00 to 14:00) when engagement rates are highest.

Q3. An IT manager is configuring the captive portal for a new stadium deployment. They set the marketing opt-in checkbox to be ticked by default, assuming fans will un-tick it if they do not want to receive SMS messages. Is this compliant?

Hint: Review the requirements for consent under GDPR and PECR.

View model answer

No, this is not compliant. Under GDPR and PECR, consent for marketing communications must be freely given, specific, informed, and unambiguous. This requires a positive opt-in action. Pre-ticked boxes do not constitute valid consent. The captive portal must present an unticked checkbox, requiring the user to actively select it to confirm their agreement to receive SMS campaigns for marketing.