Shopping center WiFi platforms for landlords: shared guest access and tenant footfall reports

A shopping center landlord needs one guest WiFi network covering the parking lot, walkways and shared spaces. Purple runs it as a cloud overlay on outdoor access points from Cisco Meraki, HPE Aruba or Ruckus. The platform should report visits, dwell and repeat visits in aggregate for tenants and leasing. The landlord owns a consented, center-level visitor list.

Which shopping center WiFi model should a landlord choose?

Most open-air shopping centers end up with one of three models. Your choice decides three things: who sees the data, who owns the visitor list, and whether the parking lot is covered at all.

• Tenant-by-tenant networks. Each retailer runs WiFi inside its own unit. You install nothing, so the parking lot, walkways and food kiosks have no coverage.
• Landlord network, connection only. You cover shared spaces with an open network. Shoppers get online, but you collect no login, no consent and no reporting beyond raw device counts.
• Landlord shared guest network with reporting. One network spans the whole center. A captive portal handles login and consent. A captive portal is the page a device shows before it grants internet access. Visit reports and a consented visitor list belong to you.

The third model is the only one that gives you data to use in leasing and marketing. Tenants keep their own networks for registers, handheld inventory devices and staff. Your network covers the space between units, where no single tenant has a reason to invest.

This is the model Purple Access delivers through Guest WiFi and WiFi Analytics. Purple Engage holds your center-level visitor list. Purple runs at 80,000+ live venues in 90 countries and handles 500 million users and logins a year (Purple's own data).

Where the three models genuinely differ

	Tenant-by-tenant networks	Landlord network, connection only	Landlord shared guest network with reporting
Parking lot and walkway coverage	None	Full center	Full center
Hardware the landlord buys	None	Outdoor access points, backhaul, switches	Same outdoor equipment, or your existing access points with a cloud overlay
Visitor login	Separate login in each unit	None, open network	One captive portal across the center, or automatic return via OpenRoaming
Visit and dwell reports	Each tenant sees its own unit only	Device counts from the controller only	Center-wide and zone-level visits, dwell, new and returning visitors
Data you can share with tenants	Nothing at center level	Raw counts with no visit context	Aggregated zone reports with no personal data
Who owns the visitor list	Each tenant, separately	Nobody, no list exists	The landlord, as controller
Landlord can email about events	No	No	Yes, to visitors who opted in
Who it suits	Parks with no budget for shared space	Parks that need basic connectivity only	Landlords using data in leasing, events and marketing

How does a retail park cover open-air areas and parking lots?

Indoor WiFi design assumes walls, ceilings and short distances. A retail park has none of those. Coverage is outdoor, long-range and line-of-sight, so the design starts with mounting points, power and backhaul.

Outdoor access points, not extenders

Specify outdoor-rated access points in enclosures rated IP66 or IP67 under IEC 60529. These ratings cover dust and water ingress. Directional or sector antennas aim coverage down parking aisles and along storefronts, not into open sky. Avoid extenders. An extender rebroadcasts a weak signal and cuts the capacity each visitor gets. Our blog on WiFi extender vs Access point: Which one do you need? explains the difference.

Mounting, power and backhaul

Light poles and building fascias are the usual mounting points. Check the power before you commit to a pole. Many parking lot lighting circuits switch on only at dusk, through a photocell or timer. An access point on that circuit goes dark in daylight. Specify a permanent supply, or Power over Ethernet (PoE, IEEE 802.3at or 802.3bt) from a nearby cabinet.

Ethernet or fiber to each access point gives the most reliable backhaul. Trenching across a live parking lot is disruptive and slow. Point-to-point wireless bridges can carry traffic between poles and the nearest building instead. Cambium and Ubiquiti UniFi both sell outdoor bridge ranges.

Radio planning

Parked cars sit between access points and shoppers, and metal bodywork absorbs and reflects signal. Mount access points high enough to clear vehicle roofs. Survey on a busy Saturday, not an empty Tuesday morning. The FCC's license-exemption rules set which 5 GHz channels and power levels you may use outdoors in the US. Ask your installer to confirm the channel plan against them.

Event days put hundreds of devices on a single radio. WiFi 6 (IEEE 802.11ax) access points handle dense crowds more efficiently than older standards. Our explainer WiFi 6 802.11 ax explained: Speed, features and gains covers the detail.

Security and separation

Put the guest network on its own VLAN. A VLAN (virtual LAN) keeps traffic logically separate on shared switches. Keep CCTV, license plate recognition cameras, parking lot payment terminals and the center management office on separate VLANs. Enable client isolation so guest devices cannot see each other.

An open network does not have to be unencrypted. Enhanced Open, defined as Opportunistic Wireless Encryption in RFC 8110, encrypts each connection without a password. Use it where your access points and visitors' devices support it. Your center management team can use Purple Staff WiFi with Microsoft Entra ID, Okta or Google Workspace sign-in, kept apart from guest traffic.

Making return visits automatic

Passpoint, also called Hotspot 2.0, lets a device join a network automatically using a stored profile. OpenRoaming is a federation built on Passpoint. It lets devices join participating networks without a login page. When a returning shopper's phone reconnects on its own, the visit is recorded without another portal step. Your repeat-visit figures become more complete as a result.

Using the hardware you already have

Purple is hardware-agnostic. It runs as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. If a park already has outdoor access points, you can usually keep them. Read Why your next WiFi upgrade doesn't need new hardware before you budget for replacements.

Which foot traffic and repeat-visit reports matter to tenants and to leasing?

Shopping center foot traffic is usually measured at the parking lot barrier or by ANPR. Those counts tell you how many vehicles arrived. WiFi visit data adds three things they miss: how long people stayed, which zones they visited and whether they came back.

Reports tenants value

• Visits by hour and day in their zone of the park
• Average dwell time in their zone against the property average
• New and returning visitors, month on month
• Event-day visits against a baseline of the same weekday in previous weeks

Tenants use these to plan staff schedules and time promotions. They also show whether a landlord event delivered anything for their unit.

Reports leasing teams use

• Property-level visits per month and per year, with the trend
• Repeat-visit rate: the share of visitors seen more than once in a period
• Average visit frequency per returning visitor
• Cross-zone movement: the share of visitors seen in more than one zone
• Home zip code district in aggregate, where visitors gave a zip code at login
• Peak hours by day of the week

A prospective restaurant or dining tenant wants dwell time near the vacant unit. It also wants to know whether visitors there also visit the anchor store. Repeat-visit rate separates a destination center from a one-trip bulky goods center. These figures carry more weight in a leasing pack than a vehicle count.

What WiFi data can and cannot count

Connected visitors are a sample of everyone at the center. Passive detection of devices that never connect has weakened since phone makers adopted MAC address randomization. Apple introduced private WiFi addresses in iOS 14. Android uses randomized MAC addresses by default from Android 10.

Treat WiFi figures as trends and ratios. Calibrate absolute totals against ANPR or people counter data. State the method in every report you hand to a tenant or prospective tenant. Our Retail page covers how shopper data supports wider retail operations.

How do you share data with tenants without sharing personal data?

Share aggregates, never records. Under CCPA/CPRA regulations, data rendered anonymous so that individuals cannot be identified falls outside data protection law. Counts, rates, and averages per zone and time period meet that test when the groups are large enough.

Rules to build into your reporting

• Report at zone and time-period level, never per device or per person.
• Suppress small numbers. Set a minimum cell count, for example 10 visitors, and hide any figure below it. Guidance from the FTC and state attorneys general explains why small groups raise re-identification risk.
• Exclude MAC addresses, email addresses, names, and device-level movement paths from every tenant report.
• Show each tenant its own zone against the property average. Never show other named tenants' figures.
• Fix the format and the schedule. A monthly report per tenant is enough for most properties.

Put it in the lease

Add a data-sharing schedule to new leases, or a side letter for existing tenants. It should set out what tenants receive, how often, and how they may use it. Include a confidentiality clause that stops onward publication. This prevents a tenant later asking for raw data you cannot lawfully hand over.

Check tenant access in the platform

When you evaluate platforms, confirm that tenant access can be limited to aggregate reports. Confirm that no tenant role can export visitor records. Ask to see this in a demo, not on a slide.

Who owns the visitor list, and how is consent recorded?

You do. The landlord decides why and how visitor data is processed, so the landlord is the controller under CCPA/CPRA guidelines. Purple processes the data on your instructions, under a processor contract as compliance standards require. Tenants do not receive the list.

Why you need consent, not soft opt-in

The TCPA and CAN-SPAM regulations require consent before you send marketing emails or messages to individuals. The soft opt-in exception covers contact details obtained during a sale, or negotiations for a sale. Logging in to a landlord's WiFi is neither. Rely on consent for event, property news, and tenant offer emails.

What valid consent capture looks like

• Keep marketing consent separate from the WiFi terms. Compliance rules require a consent request distinguishable from other matters.
• Use an unchecked box. Purple calls these conscious-choice opt-ins. Regulatory guidelines make clear that pre-checked boxes are not valid consent.
• Name the landlord and say what the emails will cover: events, property news, and offers from tenants at the property.
• Never make WiFi access conditional on marketing consent. Regulatory standards treat conditional consent as unlikely to be freely given.

What to record for every opt-in

Compliance standards require you to demonstrate that each visitor consented. For every opt-in, keep:

• The date and time
• The property and the captive portal version shown
• The exact consent wording
• The login method used
• Any later withdrawal, with its date

Article 7(3) requires withdrawal to be as easy as giving consent. Put an unsubscribe link in every email. Set a retention period for inactive records, in line with the storage limitation principle in Article 5(1)(e).

Tenant offers without passing data

When a tenant wants to reach visitors, you send the email. The tenant supplies the offer and you choose the audience in Purple Engage. The tenant receives aggregate campaign results, never the list. Purple is ISO 27001 and Cyber Essentials certified, CCPA/CPRA compliant, and a certified B Corp.

Where each model fits: worked scenarios

The figures below are illustrative. They show the method and the kind of outcome to measure, not results from a named scheme.

Scenario 1: a 24-unit retail center with a 1,100-space parking lot

Situation. Each tenant ran its own WiFi inside its unit. The parking lot, walkways and food kiosks had no coverage. The leasing team's only data was license plate recognition vehicle entries. Two vacant units sat next to the food kiosks.

What was done. The landlord fitted outdoor access points to 16 lighting columns, each moved to a permanent supply. Wireless bridges linked the three columns furthest from a building. One guest network with a single captive portal replaced the patchwork. The center was split into five reporting zones. License plate recognition and payment terminals moved to their own VLANs.

Outcome. After 12 months, reports showed average dwell in the food zone of 52 minutes, against a center average of 38 minutes. Of visitors seen in the food zone, 41% were also seen at the anchor store. The leasing pack for the vacant units now quotes measured dwell and cross-visit figures, not a vehicle count.

Scenario 2: a summer food market across one weekend

Situation. A center manager ran a two-day food market in the overflow parking lot. Tenants funded it through their marketing contribution and wanted proof it had worked.

What was done. The existing outdoor network already covered the overflow area, so it became a sixth reporting zone. Two weeks before the event, the landlord emailed visitors who had opted in. Event-day figures were compared with the average of the previous four Saturdays.

Outcome. Saturday visits rose 27% against the four-Saturday baseline. Returning visitors made up 46% of event-day visits. Each tenant received its own zone figures against the center baseline. The marketing contribution for the next event was agreed on the strength of that report.

Scenario 3: a council-owned retail center

Situation. A local government property team owned an open-air shopping center as an investment asset. The asset manager needed evidence of visitor numbers for the annual asset review.

What was done. The team completed a data protection impact assessment before launch. The CCPA/CPRA requires careful handling for systematic monitoring of a publicly accessible area on a large scale. The privacy notice named the council as controller and Purple as processor. Reports to the property committee used aggregate zone figures only.

Outcome. The committee now receives a quarterly report showing visits, dwell time and repeat-visit rate, with a year-over-year comparison. The asset review uses measured repeat-visit data in place of estimates.

What does shopping center WiFi cost to run across a portfolio?

Budget for five cost lines at each center:

• Survey and design. An outdoor survey on a trading day, with a channel plan checked against FCC rules.
• Hardware and installation. Outdoor access points, enclosures, mounting brackets, PoE switches and any wireless bridges. This line shrinks if you keep existing access points.
• Power and backhaul works. Permanent supplies to lighting columns, plus any cabling or trenching.
• Internet connectivity. A business line at each center, sized for event-day peaks.
• Platform and vendor licenses. The Purple plan for each center, plus any per-device licenses your hardware vendor charges. Cisco Meraki, for example, requires a license for each device.

Across a portfolio, run every center as a venue under one Purple account. You then see portfolio-level benchmarks and compare centers on the same measures. Purple's plans are Connect, Capture and Engage. Ask for a quote that sets each center on the plan it needs. A small center may only need connection and reporting, while a center that runs events needs Engage. Purple's platform runs at 99.999% uptime (Purple's own data).

Check whether your leases let you recover shared-area WiFi costs through common area maintenance charges. Standard commercial real estate accounting guidelines set the framework most managing agents follow. Lease terms decide what is recoverable.

If you are replacing an existing provider, sequence the move center by center. Our guide Switching guest WiFi providers: a migration checklist for multi-site venues covers the order of work.

How to decide for your estate

Map each center to the situation that fits it best.

Your situation	What to deploy
Single center, no shared-space coverage, vacant units to lease	Shared guest network with zone reports; add Engage when you start running events
Portfolio of centers with mixed hardware	One platform across all centers as a cloud overlay on the hardware already installed
Outdoor access points in place, provider you want to replace	Keep the hardware, migrate the platform center by center
Center that runs four or more events a year	Shared guest network plus Engage for the consented visitor list
City-owned or public-sector park	Shared guest network, DPIA completed before launch, aggregate reports only
Bulky goods park with short, planned visits	Shared guest network with repeat-visit and peak-hour reports for leasing

Before you shortlist, answer five questions for each park:

1. Which mounting points have a permanent power supply?
2. Can you run cable to every access point, or do you need wireless bridges?
3. Which zones will you report on, and what minimum count will you suppress below?
4. Does your lease or a side letter cover what tenants receive?
5. Who signs off the consent wording and the retention period?

Frequently asked questions

Does Purple work with the outdoor access points we already have?

Yes, in most cases. Purple is hardware-agnostic and runs as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. If your parks already have outdoor access points from these vendors, you keep them and change the platform. Ask your installer to confirm firmware levels and vendor licenses before migration. Check for coverage gaps in the parking lot at the same time.

How is retail park WiFi priced across a portfolio of parks?

You pay for three things: hardware and installation at each park, internet connectivity at each park, and the platform license. Purple's plans are Connect, Capture and Engage. Ask for a portfolio quote that sets each park on the plan it needs and runs every park under one account. Check whether your leases let you recover shared-area costs through the service charge.

Can tenants see the names or emails of visitors to the park?

No. Tenants receive aggregate reports only: visits, dwell time and repeat-visit rates for their zone, compared with the scheme average. The visitor list belongs to the landlord as controller, and Purple processes it under a processor contract. If a tenant wants to reach visitors, the landlord sends the email to consented visitors. The tenant receives aggregate campaign results.

Is WiFi visit data reliable enough for a leasing pack?

Yes, for trends and ratios such as dwell time, repeat-visit rate and cross-zone movement. Connected devices are a sample of all visitors. MAC address randomization on iOS and Android also weakens passive counts of devices that never connect. Calibrate absolute totals against parking lot LPR or people counter data, and state the method in every pack you send to a prospective tenant.

Do we need consent to email visitors about events at the park?

Yes. The TCPA and CAN-SPAM require consent for marketing emails to individuals, and the soft opt-in does not cover a WiFi login at a landlord's scheme. Capture consent with an unchecked box, separate from the WiFi terms. Name the landlord and describe the emails. Record the date, park and wording shown, and include an unsubscribe link in every email.

Can we switch guest WiFi provider without replacing hardware?

Usually, yes. Because Purple runs as a cloud overlay, switching is mainly a change of authentication, captive portal and reporting rather than a hardware project. Review the consent wording behind any visitor records before you import them, because older wording may not cover your planned emails. Our migration checklist for multi-site venues covers the sequence park by park.

Is an open guest network in a parking lot secure?

Yes, when you apply three controls. Put guest traffic on its own VLAN, away from CCTV, license plate recognition and payment systems. Enable client isolation so visitor devices cannot see each other. Use Enhanced Open (RFC 8110) where your access points and visitors' devices support it, which encrypts each connection without a password. Purple is ISO 27001 and Cyber Essentials certified.

What happens to the visitor list if we sell a park?

The list stays with you as controller unless you transfer it, and any transfer must match what visitors were told. State in your privacy notice that consent is given to the landlord of the named park. Explain what happens to the data on a sale. Take legal advice on each disposal, and remove that park's records from portfolio campaigns once it leaves your ownership.