[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"service:\u002Fservices\u002Faudience\u002Fanalytics-tracking-setup":3},{"id":4,"title":5,"body":6,"description":17,"draft":549,"extension":550,"kicker":551,"meta":552,"metaDescription":553,"navigation":554,"order":555,"path":556,"primaryKeyword":557,"seo":558,"stem":559,"summary":551,"type":560,"__hash__":561},"services\u002Fservices\u002Faudience\u002Fanalytics-tracking-setup.md","Google Analytics Setup for UK Small Businesses (GA4, GTM & Consent)",{"type":7,"value":8,"toc":524},"minimark",[9,14,18,30,33,38,41,70,73,77,80,83,86,89,92,96,99,153,159,163,166,173,184,190,193,196,200,203,237,240,256,260,263,301,304,308,315,382,386,403,413,417,420,423,427,432,435,439,442,446,458,462,469,473,476,480,483,487,490,494,497,501,512],[10,11,13],"h1",{"id":12},"google-analytics-setup-for-uk-small-businesses","Google Analytics setup for UK small businesses",[15,16,17],"p",{},"A proper Google Analytics setup gives you data you can trust and a lawful basis for collecting it. We configure Google Analytics 4 (GA4), Google Tag Manager (GTM) and Consent Mode v2 for your business, set the UK privacy controls correctly, and hand you a single dashboard showing where your customers come from and which pages lose them. Most do-it-yourself setups miss at least one of these.",[15,19,20,25,26],{},[21,22,24],"a",{"href":23},"\u002Fcontact","Book a free 30-minute setup review"," · ",[21,27,29],{"href":28},"\u002Fpricing","Start a project",[31,32],"hr",{},[34,35,37],"h2",{"id":36},"who-this-is-for","Who this is for",[15,39,40],{},"You probably need this if one of these sounds familiar:",[42,43,44,52,58,64],"ul",{},[45,46,47,51],"li",{},[48,49,50],"strong",{},"You have no analytics at all."," You're running a website and guessing what works.",[45,53,54,57],{},[48,55,56],{},"Your developer \"installed Google Analytics\" and that was the end of it."," The tag is there, but nothing is configured behind it.",[45,59,60,63],{},[48,61,62],{},"You're worried about the cookie rules."," You've heard the law changed and you're not sure whether your setup is on the right side of it.",[45,65,66,69],{},[48,67,68],{},"You have old Universal Analytics leftovers."," Universal Analytics stopped processing data on 1 July 2023 and all access to it ended on 1 July 2024 (per Google's own retirement notice), so anything still pointing at it is collecting nothing.",[15,71,72],{},"We're a small UK business ourselves, so we understand the real problem: analytics tools promise the world, and you have about ten minutes a week to actually look at any of it. The job isn't to drown you in charts. It's to set things up once, properly and lawfully, and leave you with a view you'll actually use.",[34,74,76],{"id":75},"why-this-matters-now","Why this matters now",[15,78,79],{},"You can't improve what you can't measure, and in the UK, you can't measure lawfully without the right setup. Both halves of that sentence are doing work.",[15,81,82],{},"On the data side, a bare analytics tag with nothing configured behind it produces numbers that are unreliable, legally questionable and commercially thin. You get visitor counts with no sense of which visits turned into enquiries or sales.",[15,84,85],{},"On the legal side, the rules genuinely changed. The cookie provisions of the Data (Use and Access) Act 2025 came into force on 5 February 2026, and the Information Commissioner's Office (ICO) published its final guidance on storage and access technologies on 29 April 2026. Enforcement is real, not theoretical: under the Act, fines for breaking the Privacy and Electronic Communications Regulations (PECR) now reach up to £17.5 million or 4% of annual global turnover, according to law-firm analysis by Mayer Brown, a steep rise from the previous £500,000 cap.",[15,87,88],{},"And the ICO is actively checking. Following its review of the UK's top 1,000 websites, the ICO reported that over 95% met its cookie-compliance checks: 415 passed without intervention, 564 improved only after the regulator engaged directly, and 17 received preliminary enforcement notices. That's a regulator testing real sites and writing real letters.",[15,90,91],{},"We're not in the business of frightening small businesses with the maximum fine. Published enforcement so far has focused on large platforms, not corner-shop websites. The point is simpler: getting the setup right is straightforward when someone does it properly, and there's no good reason to leave it wrong.",[34,93,95],{"id":94},"what-we-set-up","What we set up",[15,97,98],{},"A complete, documented analytics foundation configured for the UK:",[42,100,101,107,113,135,141,147],{},[45,102,103,106],{},[48,104,105],{},"GA4 property"," — created or rebuilt clean, with the correct timezone, currency set in GBP (£) and a properly configured data stream.",[45,108,109,112],{},[48,110,111],{},"Google Tag Manager (GTM) container"," — your tags, triggers and variables in one place, so changes can be made after setup without touching your website's code.",[45,114,115,118,119,123,124,123,127,130,131,134],{},[48,116,117],{},"Consent Mode v2"," — Google's framework for making its tags respect what a visitor actually consented to. It has four parameters (",[120,121,122],"code",{},"analytics_storage",", ",[120,125,126],{},"ad_storage",[120,128,129],{},"ad_user_data"," and ",[120,132,133],{},"ad_personalization","); the last two were added in November 2023, per Google's developer documentation. Without it, Google's tags fire regardless of what someone clicked on your banner, which makes the banner decorative.",[45,136,137,140],{},[48,138,139],{},"UK privacy configuration"," — Google Signals disabled or scoped to the UK; granular location and device data set per region; and data retention set deliberately (GA4 standard properties allow 2 or 14 months, and we set this explicitly rather than leaving the default). As Google documents, GA4 also drops IP addresses collected from UK, EU and Switzerland users before logging that data.",[45,142,143,146],{},[48,144,145],{},"Data-processing position made clear"," — by default, you are the data controller and Google is your data processor. We flag the one setting that changes this: enabling Google's \"products & services\" data-sharing option moves you into a controller-controller relationship under Google's terms, so we make sure that's a decision you take on purpose, not by accident.",[45,148,149,152],{},[48,150,151],{},"Search Console link"," — connected via Admin → Product Links → Search Console Links, so you can see the actual search queries bringing people to your site (the report collection is unpublished by default until we publish it).",[15,154,155,158],{},[48,156,157],{},"Optional upgrade — server-side tagging."," For higher-traffic shops or businesses running significant paid media, we can set up a server-side GTM container: more durable first-party cookies (HttpOnly), the ability to control data before it reaches third parties, and less JavaScript running in the browser. It isn't free. Google recommends a minimum of three server instances for production, at roughly $30–$50 (USD) per server per month, around £24–£40. For most small businesses, client-side GTM with Consent Mode is the right call, and we'll tell you which camp you're in.",[34,160,162],{"id":161},"the-uk-legal-reality-in-plain-terms","The UK legal reality, in plain terms",[15,164,165],{},"This is where most advice goes vague. Here's the specific position under UK law, with the specific conditions attached.",[15,167,168,169,172],{},"Analytics cookies are ",[48,170,171],{},"not"," \"strictly necessary\" under PECR, and they have no automatic exemption. That means you need one of two lawful routes.",[15,174,175,178,179,183],{},[48,176,177],{},"Route one — the statistical-purposes exception."," The Data (Use and Access) Act 2025 introduced a new exception: you don't need consent for analytics storage if it meets three conditions — the ",[180,181,182],"em",{},"sole"," purpose is collecting aggregate statistical information to improve your service, the data can't be used to identify people, and you give visitors a simple, free way to object. The catch is real, though: the moment you use the same tracking for anything else (advertising, remarketing, cross-device tracking, Google Signals) you fall outside the exception. There is a pathway that doesn't require a consent banner, but the conditions are strict, and a typical GA4 install doesn't meet them.",[15,185,186,189],{},[48,187,188],{},"Route two — consent."," Full UK GDPR-standard consent: freely given, specific, informed, and given by a clear positive action. Crucially, \"Reject all\" must be as easy and prominent as \"Accept all\"; a banner that nudges people towards \"agree\" is non-compliant, and that exact design failing is what the ICO flagged in its enforcement letters. This is the route we recommend for most businesses, because it's universal: it works whether or not you later add advertising. We pair it with Consent Mode v2 so Google's tags actually honour the choice.",[15,191,192],{},"One more thing worth saying plainly: if you run Google Ads to people in the UK or EEA, you need a certified consent management platform (CMP) integrated with the IAB Transparency and Consent Framework — that's been a requirement since 16 January 2024, per Google's own help documentation.",[15,194,195],{},"We handle the legal layer and the technical layer as one problem, because they are one problem. Plenty of setups get the tags right and the consent wrong, or the consent right and the tags firing regardless. The whole point is that they line up.",[34,197,199],{"id":198},"what-good-data-actually-looks-like","What good data actually looks like",[15,201,202],{},"Once it's set up, here's what you'll be able to see — in business terms, not analyst jargon:",[42,204,205,211,221,231],{},[45,206,207,210],{},[48,208,209],{},"Where your customers come from."," Which channels bring people who actually buy or enquire, not just people who land and leave.",[45,212,213,216,217,220],{},[48,214,215],{},"Whether they did the thing you wanted."," In GA4 these are called ",[180,218,219],{},"key events"," (they used to be called \"conversions\") — a form submission, a phone-number click, a purchase. Any event you collect can be marked as a key event. Without them, you have audience data with no commercial signal.",[45,222,223,226,227,230],{},[48,224,225],{},"Which pages keep people and which lose them."," GA4 leads with ",[180,228,229],{},"engagement rate"," — the share of sessions that last longer than 10 seconds, include a key event, or have two or more page views. (Bounce rate, if you remember it, is simply the inverse.)",[45,232,233,236],{},[48,234,235],{},"What people searched to find you."," Through the Search Console link — particularly useful if you're a local or regional business, because it surfaces the exact queries driving organic traffic in your area.",[15,238,239],{},"We bring all of this together in a single dashboard built in Looker Studio: one view showing where your visitors come from, which pages they leave on, and whether they took the action you wanted. It's something you can share with your team or your accountant, and read in a couple of minutes.",[15,241,242,243,123,246,130,249,252,253,255],{},"One note for shops: e-commerce events like ",[120,244,245],{},"purchase",[120,247,248],{},"add_to_cart",[120,250,251],{},"begin_checkout"," are ",[48,254,171],{}," collected automatically. They have to be implemented deliberately, usually through a data layer and GTM. If you sell online, this is part of doing the job properly rather than an optional extra.",[34,257,259],{"id":258},"why-proper-setup-beats-the-tag-is-installed","Why proper setup beats \"the tag is installed\"",[15,261,262],{},"The single most common thing we see is a GA4 tag that's present but broken in ways the owner can't see. Typically:",[42,264,265,271,277,283,289,295],{},[45,266,267,270],{},[48,268,269],{},"The tag is hard-coded, with no GTM"," — so every future change needs a developer and there's no version control.",[45,272,273,276],{},[48,274,275],{},"No Consent Mode v2"," — Google's tags fire regardless of consent, which is a PECR risk and makes the banner pointless.",[45,278,279,282],{},[48,280,281],{},"Data retention left on default"," — when setting it explicitly (and shorter, if you're relying on the statistical exception) is more defensible.",[45,284,285,288],{},[48,286,287],{},"Google Signals left on without proper consent"," — which quietly creates advertising identifiers and pushes you outside the statistical-purposes exception.",[45,290,291,294],{},[48,292,293],{},"No Search Console link"," — so you're blind to organic search queries.",[45,296,297,300],{},[48,298,299],{},"No key events"," — leaving you with traffic data that's decorative: nice to look at, no use for decisions.",[15,302,303],{},"The tag being present doesn't mean the data is usable, and it certainly doesn't mean it's lawful. That gap is the whole reason this service exists.",[34,305,307],{"id":306},"how-we-work-our-process","How we work — our process",[15,309,310,311,314],{},"A clear, bounded piece of work. Typically ",[48,312,313],{},"2–3 weeks"," from kick-off to live:",[316,317,318,324,330,336,342,348,354,364,370,376],"ol",{},[45,319,320,323],{},[48,321,322],{},"Discovery call"," — we learn your business goals and what you've got now.",[45,325,326,329],{},[48,327,328],{},"Audit"," — we review your current tags, consent setup and data quality, and tell you plainly what's wrong.",[45,331,332,335],{},[48,333,334],{},"GA4 configuration"," — a clean or rebuilt property, currency in GBP, set up correctly.",[45,337,338,341],{},[48,339,340],{},"GTM container"," — built with Consent Mode v2 in place.",[45,343,344,347],{},[48,345,346],{},"Consent banner"," — we check yours, or recommend a UK-compliant CMP if you need one.",[45,349,350,353],{},[48,351,352],{},"UK privacy settings"," — Google Signals, location\u002Fdevice granularity and data retention all configured deliberately.",[45,355,356,359,360,363],{},[48,357,358],{},"Key events"," — scoped to the actions that matter to ",[180,361,362],{},"your"," business.",[45,365,366,369],{},[48,367,368],{},"Search Console"," — linked, so organic search data flows in.",[45,371,372,375],{},[48,373,374],{},"Dashboard"," — built in Looker Studio around your key metrics.",[45,377,378,381],{},[48,379,380],{},"30-day check-in"," — we come back and confirm the data is clean and behaving.",[34,383,385],{"id":384},"what-you-get","What you get",[42,387,388,391,394,397,400],{},[45,389,390],{},"A GA4 property configured for UK compliance",[45,392,393],{},"A GTM container with a documented tag structure",[45,395,396],{},"Consent Mode v2 active and honouring real consent choices",[45,398,399],{},"A Looker Studio dashboard with your key metrics, ready to share",[45,401,402],{},"A written record of your data-processing setup — useful for your privacy notice and for answering any ICO query",[15,404,405,408,409,412],{},[48,406,407],{},"Ongoing option:"," a monthly data review call, where we read the numbers with you and turn them into a short list of what to do next. This sits naturally within our monthly plan. See ",[21,410,411],{"href":28},"Pricing"," for how that works, or take it as a one-off project.",[34,414,416],{"id":415},"proof","Proof",[15,418,419],{},"Our position rests on the evidence above — the ICO's review of the UK's top 1,000 websites.",[15,421,422],{},"That review is the enforcement reality behind the work: the ICO tested those sites, issued 17 preliminary enforcement notices, and 564 of them only improved after the regulator made direct contact. This is an active area, and getting it right quietly is far cheaper than fixing it under a letter.",[34,424,426],{"id":425},"frequently-asked-questions","Frequently asked questions",[428,429,431],"h3",{"id":430},"do-i-need-a-cookie-consent-banner-for-google-analytics","Do I need a cookie consent banner for Google Analytics?",[15,433,434],{},"It depends how you use it. Under the statistical-purposes exception introduced by the Data (Use and Access) Act 2025 (and the ICO's final guidance of 29 April 2026), you may not need consent — but only if the sole purpose is improving your service, the data is genuinely aggregate and can't identify people, and you offer a simple, free way to object. The moment Google Signals, advertising features or remarketing are in play, you need full UK GDPR-standard consent. Because most small-business GA4 setups don't cleanly meet the exception as installed, a compliant consent banner is usually the safest, most universal choice.",[428,436,438],{"id":437},"my-web-developer-installed-google-analytics-isnt-that-enough","My web developer installed Google Analytics — isn't that enough?",[15,440,441],{},"Installing the tag is the first step, not the finish line. Without Google Tag Manager you have no version control and can't update tags without code changes. Without Consent Mode v2, Google's tags fire regardless of what someone consented to — a PECR risk. Without key events you have traffic data but no record of who actually enquired or bought. Without Search Console linked, you can't see which searches bring people in. A bare install typically produces data that's unreliable, legally questionable and commercially thin.",[428,443,445],{"id":444},"what-is-consent-mode-v2-and-why-do-i-need-it","What is Consent Mode v2 and why do I need it?",[15,447,448,449,123,451,123,453,130,455,457],{},"It's Google's way of making its measurement and advertising tags respect a visitor's consent decision. It has four parameters — ",[120,450,122],{},[120,452,126],{},[120,454,129],{},[120,456,133],{}," (the last two added in November 2023). When someone declines, tags in Consent Mode reduce what they collect rather than firing fully. Without it, Google's tags collect data regardless of the banner choice, which makes the banner decorative. It doesn't replace the need to obtain and record consent — it makes the tags behave in line with it.",[428,459,461],{"id":460},"will-ga4-share-my-customers-data-with-google-for-advertising","Will GA4 share my customers' data with Google for advertising?",[15,463,464,465,468],{},"Not by default. By default Google is your data ",[180,466,467],{},"processor"," — your data, your control — and Google drops IP addresses for UK users before storing them. That only changes if you enable the \"Google products & services\" data-sharing setting and accept Google's controller-controller terms, which lets Google use the data for its own purposes. Keeping that setting off, and keeping Google Signals off unless you have proper consent, keeps the relationship clean. We set this up deliberately so it's never an accident.",[428,470,472],{"id":471},"what-is-server-side-tagging-and-do-i-need-it","What is server-side tagging, and do I need it?",[15,474,475],{},"Server-side tagging moves measurement from the browser to a server you control. The benefits are more durable first-party cookies, the ability to control data before it reaches third parties, and less JavaScript in the browser. The cost is real: Google recommends a minimum of three server instances for a reliable production setup, at roughly $30–$50 (USD) per server per month — around £24–£40. For most small businesses, client-side GTM with Consent Mode is enough. It's worth considering for higher-traffic e-commerce or significant paid media, and we'll give you a straight answer either way.",[428,477,479],{"id":478},"how-long-does-ga4-keep-my-data","How long does GA4 keep my data?",[15,481,482],{},"For standard GA4 properties, user-level and event-level retention can be set to 2 or 14 months. That setting affects explorations and funnel reports — your standard aggregated reports aren't affected by it. Google Signals data is kept for a maximum of 26 months regardless of the setting. If you're relying on the statistical-purposes exception, a shorter retention period is more defensible, so we set this on purpose during setup rather than leaving it on the default.",[428,484,486],{"id":485},"i-have-universal-analytics-data-can-i-move-it-to-ga4","I have Universal Analytics data — can I move it to GA4?",[15,488,489],{},"No. Universal Analytics stopped processing data on 1 July 2023, and all access ended on 1 July 2024. The two systems use fundamentally different models — session-based versus event-based — so historical Universal Analytics data can't be imported into GA4. If you had data worth keeping, it needed exporting before Google deleted it. GA4 is set up fresh, and like-for-like historical comparison inside the platform isn't possible.",[428,491,493],{"id":492},"what-should-i-actually-be-looking-at-as-a-small-business-owner","What should I actually be looking at as a small-business owner?",[15,495,496],{},"Three things. First, traffic sources — which channels bring people who convert, not just visit. Second, key events — did they submit the form, click the phone number, complete the purchase? Without these you have audience numbers with no commercial signal. Third, engagement rate and landing-page performance, alongside Search Console data on which searches drive organic traffic. Your Looker Studio dashboard puts all three in one view you can read in a couple of minutes.",[34,498,500],{"id":499},"lets-get-your-data-right","Let's get your data right",[15,502,503,506,511],{},[21,504],{"id":505},"book-a-review",[21,507,508],{"href":23},[48,509,510],{},"Book a free 30-minute setup review."," We'll look at what you have now and tell you exactly what needs to change — no charge for the conversation, no obligation.",[15,513,514,517,520,521,523],{},[21,515],{"id":516},"start-a-project",[48,518,519],{},"Ready to go?"," ",[21,522,29],{"href":28}," and we'll get your GA4, Google Tag Manager and consent setup right, configured for the UK, in two to three weeks.",{"title":525,"searchDepth":526,"depth":526,"links":527},"",2,[528,529,530,531,532,533,534,535,536,537,548],{"id":36,"depth":526,"text":37},{"id":75,"depth":526,"text":76},{"id":94,"depth":526,"text":95},{"id":161,"depth":526,"text":162},{"id":198,"depth":526,"text":199},{"id":258,"depth":526,"text":259},{"id":306,"depth":526,"text":307},{"id":384,"depth":526,"text":385},{"id":415,"depth":526,"text":416},{"id":425,"depth":526,"text":426,"children":538},[539,541,542,543,544,545,546,547],{"id":430,"depth":540,"text":431},3,{"id":437,"depth":540,"text":438},{"id":444,"depth":540,"text":445},{"id":460,"depth":540,"text":461},{"id":471,"depth":540,"text":472},{"id":478,"depth":540,"text":479},{"id":485,"depth":540,"text":486},{"id":492,"depth":540,"text":493},{"id":499,"depth":526,"text":500},false,"md",null,{},"Google Analytics setup done properly for UK small businesses: GA4, Google Tag Manager, Consent Mode v2 and PECR-compliant tracking. Book a free 30-minute review.",true,99,"\u002Fservices\u002Faudience\u002Fanalytics-tracking-setup","google analytics setup",{"title":5,"description":17},"services\u002Faudience\u002Fanalytics-tracking-setup","service","ZlI70DulqoFOMdm1LcJzHnNNjxLBlQFpn8HL4U-MPRc"]