Home › Guides › CASL

Guide · updated 2026-09-10 · not legal advice

Collecting guest emails from WiFi in Canada: the CASL rules for short-term rental hosts

The short answer

You may collect a guest's email at the WiFi sign-in. You may only market to it if the guest gave express consent — a separate box they ticked themselves, that was not required to get online — and you can prove it. Keep the record, include an unsubscribe link, and you're compliant with CASL, and with CAN-SPAM and GDPR too.

The four things CASL requires

  1. Express consent, obtained properly. The guest must opt in. A pre-ticked box, or consent bundled into “I accept the WiFi terms”, doesn't count. WiFi access must not be conditional on the marketing opt-in.
  2. Clear purpose and identity. Say who is asking and what you'll send (“occasional offers and local tips from SignInStay on behalf of [property]”).
  3. Proof. Keep the date, time, IP or device, and the exact wording shown for every consent. If the CRTC asks and you can't produce it, the consent is presumed not to exist.
  4. Unsubscribe in every message, honoured within 10 business days, plus your contact details.

What this looks like on the sign-in page

Two checkboxes: “I accept the WiFi terms” (required) and “Yes, email me occasional offers and local tips. I can unsubscribe at any time.” (optional, unchecked). Guests who leave the second box empty still get online, and you still know they stayed — you just don't email them offers. That is exactly how SignInStay ships by default; the consent text is editable, the checkbox behaviour is not.

Common mistakes we see

Quick checklist

Sources: CRTC guidance on CASL consent. This page is general information, not legal advice; check with counsel for your situation.

Frequently asked

Can I require an email address to use my rental’s WiFi in Canada?

You can require an email to connect, but under CASL you cannot treat that as consent to send marketing. Marketing consent must be a separate, unchecked checkbox that guests can decline while still getting WiFi. Record who consented, when, how, and the wording they saw.

Does CASL apply to a small Airbnb host?

Yes. CASL applies to any commercial electronic message sent to or from Canada, regardless of business size. Penalties can reach $10 million per violation for businesses; in practice the CRTC focuses on patterns of non-compliance, but the burden of proving consent is on the sender.

What about implied consent from a past booking?

CASL allows implied consent for two years after a purchase (an “existing business relationship”), so you can email a guest who booked with you directly. Airbnb bookings are murkier — the contract is with Airbnb — and guests-of-guests never booked at all. Express consent at the WiFi sign-in removes the doubt.

Do I need to include an unsubscribe link?

Yes. Every commercial email needs a working unsubscribe mechanism honoured within 10 business days, plus your name and contact information.

What if my guests are American?

CAN-SPAM (opt-out based) governs email to US recipients, but if you are sending from Canada, CASL still applies to you. Following CASL’s express-consent standard satisfies both, and GDPR for European guests.

Ask SignInStayAnswers in seconds · humans within a day
Hi! Ask me about setup, routers, pricing, integrations or consent rules. If I can't answer, I'll point you to a person.