The best guest WiFi marketing platform for a shopping centre in Europe is the one that builds a visitor database the centre owns, records GDPR consent properly and runs across a whole portfolio. Purple, Aislelabs and Cloud4Wi are established WiFi specialists. Flame Analytics adds people counting and AI video analytics on existing cameras in the same platform.
Full disclosure: Flame Analytics is our own platform. We compare it with the same criteria as the others, using only what each vendor publishes on its own website, and we say clearly where it fits and where it does not.
What a shopping centre needs from guest WiFi marketing
A shopping centre needs guest WiFi that turns anonymous footfall into a consented database the centre owns, plus reporting it can take into leasing meetings and board reviews.
Centre marketing and asset management teams tend to describe the same four problems:
- The visitor is lost at the door. Thousands of people walk through every day and leave no trace. Once they step out, the centre has no way to reach them again.
- The tenants own the shopper, the centre does not. The relationship with the end customer sits in each operator's tills and apps. The landlord manages the building but cannot talk to the people who fill it.
- The database barely grows. Events and loyalty schemes depend on a contact list that hardly moves.
- Footfall is hard to prove when it matters. In leasing and renewal negotiations, rents are justified with estimates instead of measured visitor trends and profiles.
Hence the criteria used here: a branded captive portal, GDPR-proof consent, CRM integration, visitor analytics and portfolio management. One more separates the platforms most clearly: whether WiFi data can be read against real footfall in the same tool. For what the channel can do, see our guide to guest WiFi marketing.
Comparison table
The table compares the four platforms on the criteria that matter to a shopping centre, using only what each vendor states on its own website (checked on 14 October 2026). It describes published capabilities, not tests we ran.
| Platform | HQ | Captive portal | Consent management (GDPR) | CRM integrations (public) | Footfall / video analytics in the same platform | Multi-site portfolio | Source |
|---|---|---|---|---|---|---|---|
| Purple | Manchester, UK (founded 2012) | Yes: branded sign-in with email, social login or short form; one-line return sign-in | UK GDPR and CCPA consent recorded with a full audit trail | 400+ connectors, including Salesforce, HubSpot, Mailchimp, dotdigital and Placewise | WiFi-based visitor insight: new and returning shoppers, dwell time, micro surveys | Yes: estate run centrally, sign-in pages scheduled by date and by centre | purple.ai |
| Aislelabs | Markham, Ontario, Canada | Yes: email, SMS and social logins; portal built for shopping centres | Privacy policy covers EEA and UK GDPR rights; ISO 27001:2022 and SOC 2 shown on its site | Library including Mailchimp, Bloomreach, Capillary and LoyaltyLion; loyalty programme API | WiFi analytics plus data from third-party people counters (Xovis among listed hardware integrations) | Yes: plan for multi-location mall operators | aislelabs.com |
| Cloud4Wi | New York, USA, with an office in Pisa, Italy (founded 2014) | Yes: branded portal on first visit, Passpoint reconnection on return | Granular consent, configurable retention, localised notices, MyData Portal; SOC 2 Type II | CRM, PMS and identity providers through APIs, webhooks and connectors | WiFi-based shopper profiles; audience insight and footfall analytics offered to tenants | Yes: every centre from one dashboard | cloud4wi.ai |
| Flame Analytics | Gijón, Spain (founded 2016) | Yes: branded portal, social and email login, 20+ languages | Granular consent, marketing boxes unticked by default, optional double opt-in, automatic deletion on request; data on EU servers | HubSpot and Salesforce, plus a REST API | Yes, native: people counting, journeys and occupancy from AI video on existing CCTV (Hypersensor) | Yes: multiple locations from one interface, content and design per site | flameanalytics.com |
Absence of a feature on a vendor's website does not prove the product lacks it. Treat every gap in this table as a question for your RFP, not as a verdict.
Platform by platform
Each platform is described on the same points: what it is, shopping centre evidence, consent, integrations and best fit.
Purple
FACT SHEET
HQ: Manchester, UK · Founded: 2012 · Products: guest WiFi, staff WiFi, multi-tenant WiFi · Shopping centre customers named on its site: St James Quarter, Highcross Leicester, Metrocentre, Midsummer Place, Battersea Power Station.
“Purple is a WiFi platform for venues, with three products on one platform”
Purple, purple.ai, consulted 14 October 2026
Purple runs as a cloud layer on access points the centre already owns, and lists support for Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet.
It is the vendor in this list with the most published shopping centre results. On its shopping centre page, Purple reports that Highcross Leicester raised its opt-in rate from 56% to 80%, and that St James Quarter turned 16,743 sign-ins into 6,362 new CRM records in one month, at a 38% opt-in rate. Consent is recorded under UK GDPR with a full audit trail, and records flow to the CRM through more than 400 connectors.
Best fit: UK and US centres that want a WiFi specialist with a large connector library and staff and device networks in the same tool. Check in your RFP: its shopping centre page describes WiFi-based visitor insight; if you need counted footfall at entrances, plan how it will connect to a counting system.
Aislelabs
FACT SHEET
HQ: Markham, Ontario, Canada · Products: Aislelabs Connect, Aislelabs Marketing, Aislelabs Flow AI · Security: ISO 27001:2022 and SOC 2 badges on its site.
“Industry-specific marketing and analytics solutions powered by WiFi and people counter data”
Aislelabs, aislelabs.com, consulted 14 October 2026
Aislelabs offers a captive portal built for shopping centres, with multiple languages, email, SMS and social logins, and a loyalty programme integration that can make faster internet a member benefit. Visit-triggered messages target three personas: new visitors, frequent returning visitors and long-absence visitors.
Its pitch to leasing teams is dwell time and traffic counts by space and tenant, "using the WiFi you already have today". Its hardware integrations cover the main WiFi vendors and people counters such as Xovis, so a centre can combine portal data with counts from sensors it already runs. Its privacy policy sets out the rights of EEA and UK residents under the GDPR and UK GDPR.
Best fit: centres and mixed-use operators that want WiFi-derived leasing metrics and already own people counters. Check in your RFP: footfall from counters arrives through third-party hardware, so confirm which counters you have and who supports the integration.
Cloud4Wi
FACT SHEET
HQ: New York (Brooklyn), with an office in Pisa, Italy · Founded: 2014 · Products: Guest WiFi, MDU WiFi, Cloud Network Access Control · Certification: SOC 2 Type II.
“Shoppers opt in explicitly before any data is captured”
Cloud4Wi, shopping centres page, consulted 14 October 2026
Cloud4Wi combines a branded captive portal on the first visit with Passpoint, so returning shoppers reconnect automatically. It describes itself as SOC 2 Type II certified and GDPR-native, with a MyData Portal for data-rights requests. It runs on existing access points (Cisco, Meraki, HPE Aruba, Ruckus, Extreme and others) and lets a centre offer consented audiences and campaigns to tenants as a service, without sharing raw personal data.
It has a documented European shopping centre reference. According to its Carmila case study, the retail property company deployed Cloud4Wi over Cisco Meraki across 124 locations in France in summer 2017 and 25 in Spain two years later, with portals customised per location and language and social and email logins.
Best fit: large multi-country landlords that prioritise seamless reconnection and network access control for staff and devices. Check in your RFP: analytics come from WiFi; if you need entrance counts, ask how they would be measured and combined.
Flame Analytics
FACT SHEET
HQ: Gijón, Spain · Founded: 2016 · Customers: 90+ B2B customers across 12 countries · WiFi product: Flame Connect.
Flame Connect provides branded captive portals with social and email login, consent management, email, SMS and in-portal campaigns triggered by behaviour, visit frequency or location, and an iOS and Android SDK for the centre's own app. It works with the main network vendors (Cisco, Aruba, Ruckus, Cambium, Ubiquiti and others) through standard RADIUS, WPA Enterprise or HTTP redirect, and syncs with HubSpot and Salesforce or any system through its REST API.
The difference is that the same platform measures what happens inside the centre. Flame's Hypersensor applies AI video analytics to the CCTV cameras the centre already has, for people counting, journeys and occupancy, without biometrics. Flame states over 99% people counting accuracy, and its shopping mall analytics are used in more than 50 shopping centres.
Published shopping centre cases include Oasiz Madrid (280,000 square metres and more than 120 stores, with a personalised WiFi portal), Zenia Boulevard (an open-air centre combining analytics, connectivity and guest WiFi marketing), Marineda City (more than 17 million visitors a year, analysed with the Customer Journey module) and CBRE Spain (a digital loyalty programme rolled out across six centres).
“Connectivity becomes a new touchpoint with the visitor and helps us better understand how to engage with them.”
Oasiz Madrid, case study on flameanalytics.com
Want to see WiFi and footfall data side by side for your centre?
In a 20-minute demo we show how Flame Connect and people counting work on the network and cameras you already have.
Where Flame Analytics fits
Flame Analytics fits shopping centre owners and operators in Europe who want guest WiFi marketing and footfall data in one platform, on the infrastructure they already have. It is a narrower fit for buyers whose needs stop at connectivity.
It fits well when:
- You manage a portfolio of centres in Europe and need comparable data across all of them.
- Your centres already have access points and CCTV, and you want to avoid new hardware.
- Leasing and asset teams need measured footfall and visitor profiles, not only a contact list.
- Your organisation requires GDPR by design: no biometrics and visitor data held on EU servers.
It is not the obvious choice when:
- You only want a free hotspot with a terms-of-use page and no marketing.
- Your priority is the widest marketplace of martech connectors: Purple publishes more than 400.
- Automatic Passpoint or OpenRoaming reconnection is a hard requirement: Cloud4Wi and Purple document it on their sites, so ask Flame to confirm it for your network.
- You need many local references in your own country: most of Flame's published shopping centre cases are in Spain, so ask for references that match your market.
GDPR and consent: what to check
Under the GDPR, WiFi marketing is lawful when the visitor gives specific, informed and unambiguous consent through a clear affirmative act, and can withdraw it as easily as it was given (Article 7). What differs between platforms is how consent is collected, stored and honoured.
“Silence, pre-ticked boxes or inactivity should not therefore constitute consent.”
Recital 32, General Data Protection Regulation, quoted in ICO guidance on valid consent
Use this checklist when you evaluate a portal:
- Unticked boxes by default. Marketing consent must be an active choice. Flame states that its marketing checkboxes are unchecked by default, with optional double opt-in.
- Separate, granular purposes. Email, SMS, profiling and sharing with tenants are different purposes and need separate choices. The EDPB guidelines on consent explain why bundling them weakens consent.
- Access without marketing. Visitors should be able to get online with minimal data, or anonymously if the centre allows it, without being forced into marketing.
- An audit trail. You must be able to prove who consented, to what and when. Purple and Flame both describe a consent audit trail.
- Erasure on request. Article 17 gives visitors the right to have their data erased. Check that deletion is automatic and reaches connected CRMs.
- Data location and retention. Ask where data is stored and for how long. Flame stores Connect data on EU servers; Cloud4Wi offers configurable retention policies.
- UK marketing rules. In the UK, marketing emails are also governed by PECR; see the ICO guide to electronic mail marketing.
MAC address randomisation changes how returning visitors are recognised. Apple devices identify themselves to each network with a private WiFi address that can rotate, a feature introduced with iOS 14, and Android 11 and later behave similarly. Counting returning visitors by device address therefore undercounts them. The platforms here recognise returns through the registered login instead: Flame through the registered email and behavioural patterns, Purple through one-line return sign-in and Cloud4Wi through Passpoint profiles.
How to measure the ROI of mall WiFi
Measure the ROI of mall WiFi with four numbers: capture rate, marketable records, return visits and the footfall effect of campaigns sent to that database. Keep definitions consistent: vendors publish different ratios.
- Capture rate: registered visitors divided by unique connections. Flame Analytics reports typical rates of 25-40% with a clear incentive (free WiFi, a coupon, exclusive content) and 8-15% without one.
- Opt-in rate: sign-ins that accept marketing divided by all sign-ins. This is what Purple publishes for Highcross Leicester (80%) and St James Quarter (38%). It is not comparable with a capture rate.
- Marketable records per month: new contacts with valid marketing consent. Purple reports 6,362 in one month at St James Quarter.
- Return visit rate and campaign conversion: the share of visitors who come back and the share of recipients who act on a campaign. Flame's guest WiFi reporting includes unique connections, captured leads, dwell time, demographics, campaign conversion and return visit rate.
The missing link in most WiFi reports is real footfall. With entrances counted in the same platform, a campaign can be judged by whether it moved visits, not only clicks.
A practical 90-day test for a single centre:
- Record four weeks of baseline footfall and WiFi sessions.
- Launch the branded portal with one clear incentive and granular consent.
- Track capture rate and marketable records weekly.
- Send two campaigns to defined segments (for example lapsed visitors) and keep a control group.
- Compare footfall and return visits on comparable days against the baseline and the control group.
Frequently asked questions
What is guest WiFi marketing for shopping centres?
Guest WiFi marketing for shopping centres turns the free WiFi in the centre into a consented visitor database and a marketing channel. Shoppers sign in through a branded captive portal, choose what they agree to receive, and the centre uses that first-party data for campaigns, events, loyalty and tenant offers. Platforms such as Purple, Aislelabs, Cloud4Wi and Flame Analytics provide the portal, the consent records and the analytics.
Is WiFi marketing GDPR compliant in Europe?
Yes, when consent is specific, informed and given by a clear affirmative act. Marketing boxes must be unticked by default, purposes must be separated, consent must be recorded and as easy to withdraw as to give, and visitors must be able to have their data erased. Recital 32 of the GDPR states that silence, pre-ticked boxes or inactivity do not constitute consent. In the UK, PECR also applies to marketing emails.
What capture rate can a mall captive portal achieve?
According to Flame Analytics, a well designed portal with a clear incentive (free WiFi, a coupon or exclusive content) typically captures 25-40% of connected visitors, and 8-15% without an incentive. Vendors also publish opt-in rates, which use a different denominator: Purple reports an 80% opt-in rate at Highcross Leicester. Compare like with like before benchmarking.
Does guest WiFi still work with MAC address randomisation?
Yes, but device addresses are no longer a reliable way to recognise returning visitors. iOS 14 and later and Android 11 and later use private, rotating WiFi addresses. Modern platforms recognise returning visitors through the registered login (email or social account), one-line return sign-in or Passpoint profiles instead of the MAC address. Flame Analytics identifies returning visitors through the registered email and behavioural patterns.
Can WiFi data be combined with footfall counting?
Yes. Some platforms combine WiFi data with counts from third-party sensors (Aislelabs lists people counter integrations such as Xovis). Flame Analytics runs guest WiFi marketing and people counting in the same platform, counting footfall with AI video analytics on the centre's existing CCTV cameras, so the database can be read against real visitor numbers.
Who owns the visitor data: the mall or the tenants?
The data belongs to whoever the visitor consented to: usually the centre's owner or operator, as the data controller named in the portal. Tenants own the shoppers in their own tills and apps. A centre can share insight with tenants as aggregated figures, or pass contacts to them only with explicit consent for that purpose. Check that the contract states the database belongs to the owner, not the managing agent or the WiFi supplier.
Sources
| Source | What we used it for |
|---|---|
| Purple: home page and about page | Founding year and city (2012, Manchester), product scope, venue count, supported access points |
| Purple: WiFi for shopping centres | Shopping centre customers, opt-in results, consent audit trail, connectors |
| Aislelabs: shopping centres page and home page | Shopping centre portal, loyalty integration, visit-triggered messaging, mailing address |
| Aislelabs: hardware and software integrations | WiFi vendors, people counter integrations (Xovis), software integrations |
| Aislelabs: security and privacy policy | ISO 27001:2022 and SOC 2, EEA and UK GDPR rights |
| Cloud4Wi: shopping centres page | Passpoint, consent management, SOC 2 Type II, tenant services |
| Cloud4Wi: offices and Carmila case study | Headquarters and Pisa office, Carmila rollout in France and Spain |
| Flame Analytics: Connect, guest WiFi marketing, shopping malls, about us, information security | Flame capabilities, capture rates, consent, integrations, company facts |
| Regulation (EU) 2016/679 (GDPR), EUR-Lex | Recital 32, Article 7 (conditions for consent), Article 17 (erasure) |
| ICO: What is valid consent? | UK GDPR consent requirements |
| ICO: Electronic mail marketing (PECR) | UK rules for marketing emails |
| EDPB Guidelines 05/2020 on consent | EU guidance on valid consent |
| Apple Support: Use private Wi-Fi addresses | Private, rotating WiFi addresses since iOS 14 |
All vendor facts were checked on each vendor's own website on 14 October 2026. Flame Analytics figures come from flameanalytics.com. If a vendor updates its site, the facts above may change: tell us and we will update this comparison.