What your guest WiFi terms should say, a plain-English template you can adapt, and how to put it on the login page so guests actually accept it. A starting point to review with your lawyer - not legal advice.
When you give the public access to the internet through your connection, what they do with it can come back to you: a copyright notice from your provider, a police request about an IP address, a complaint that the WiFi was unsafe. Terms that guests accept before they connect set out what is allowed, that sessions are logged, and that you are not liable for what happens on their device.
Terms only help if they are actually accepted. That is what a captive portal is for: the login page shows the terms and the guest ticks a box or taps Accept before the network lets them through. A password printed on a card does neither.
Replace the [bracketed] parts. Keep it short enough that someone could read it on a phone.
By connecting to the [Venue Name] WiFi you agree to these terms. If you do not agree, do not use the service.
WiFi is provided free of charge [or: as part of your stay] for reasonable personal and business use. It may be limited in speed, data or time, and may be interrupted, changed or withdrawn at any time.
You must not use the service for anything unlawful; to download or share material that infringes copyright; to send spam; to access or distribute illegal or abusive content; to attack, probe or interfere with any network or device; or in a way that prevents other guests from using it. We may block sites and services and disconnect anyone who breaks these terms.
Public WiFi is not a secure network. Use encrypted websites and apps, keep your device updated, and do not use the service for sensitive transactions unless you are comfortable doing so. We are not responsible for loss of data or harm to your device.
To operate the service and meet our legal obligations, we record [your mobile number / room number / voucher], your device's identifiers (such as MAC and IP address), and the times and amount of your use, and we keep these records for [period]. We may share them with authorities where the law requires. [Name of provider] operates the service on our behalf. See our privacy notice: [link].
Users under [18] may use the service only with the permission of a parent or guardian.
The service is provided as is. To the extent the law allows, [Venue Name] is not liable for any loss arising from your use of it or from its unavailability.
These terms are governed by the laws of [country / state].
This template is a starting point only and is not legal advice. Data-protection and record-keeping rules differ by country - in India, for example, the Digital Personal Data Protection Act 2023 and the CERT-In log-retention directions; in the UK and EU, the GDPR. Have it reviewed for your country. For India, see WiFi log compliance.
A two-line summary next to an "I accept the terms" box, with the full terms on a link.
The network should not let a device through until the terms are accepted, and the acceptance should be recorded with the session.
Show the terms in the languages your guests read; the login page can carry more than one.
When you change the terms, keep the old version, so you know what a guest agreed to on a given date.
On iberry's captive portal, the terms sit on your branded login page, guests accept them before they get online - by PMS room login, voucher or SMS OTP - and each session is recorded.
It is strongly advisable. Terms that guests accept before connecting set out acceptable use, tell them their sessions are logged and limit your liability. They work only if the login page makes guests accept them.
The part of the terms that lists what users may not do on the network - unlawful activity, copyright infringement, spam, attacking other devices, or hogging the connection - and what happens if they do.
Use it as a starting point. Fill in the bracketed parts and have it checked against the law where your venue is - data-protection and log-keeping rules differ between countries. It is not legal advice.
Data-protection laws generally require you to tell people what you record and why. A logging notice in the terms, with a link to your privacy notice, is the usual way.
General information, not legal advice. Have your terms reviewed for your country before use.
iberry's captive portal shows your terms, records acceptance with each session and keeps the logs. Published plans in India: ₹30,000 one-time for 30-40 rooms, ₹50,000 for 40-60 rooms and ₹99,000 for large and five-star hotels, each with ₹15,000 yearly maintenance. Outside India every project is quoted on its own, because the hardware is usually bought locally.
Ask for a Quote