Separate the networks, always
Guest traffic must sit on a separate VLAN or guest SSID with client isolation, with no route to your till, card terminal or back-office systems. This is also a PCI requirement where card processing shares the same connection.
Cap and shape the guest bandwidth
Set a per-device limit so one customer streaming video does not slow your card payments. A 5-10 Mbps cap per device is generous for browsing and protects business traffic.
Captive portals and data
A login portal can capture marketing consent, but only collect what you will genuinely use and be clear in your privacy notice. Most businesses get better returns from a fast, frictionless connection than from a data-harvesting login wall.
Want this reviewed for your business?
Send us a recent bill and a consultant from our Cardiff office will tell you, honestly, whether you are paying more than you need to.