How to Set Up Google Analytics 4 From Scratch: The Right Setup for Small Businesses
8 min read · AstraLoop Studio
Google Analytics 4 (GA4) is the standard you use to measure what happens on your site: where people come from, what they do, how many fill out a form or complete a purchase. Since July 1, 2023, Universal Analytics has stopped collecting data, so today there's no alternative inside the Google ecosystem. The problem is that GA4 is powerful but far from intuitive, and most small businesses install it halfway: the tag is there, but the events that matter aren't tracked, consent isn't configured, and the numbers don't tell you anything useful.
This is a hands-on guide to setting up GA4 from scratch even if you're not technical. No theory: just the steps in the right order, the choices that matter for a small-to-medium business, and a final checklist to verify everything actually works before you trust the data. If you want the bigger picture of how tags, events, and conversions fit together, keep the complete guide to conversion tracking handy.
What you need before you start
Three things, and the third one makes all the difference:
- A Google account (the business one you already use for Gmail or Google Ads works fine).
- Access to the site, meaning the ability to insert a code snippet into the pages. On WordPress and Shopify, a plugin or a dedicated field is enough, no manual code required.
- A list of what you want to measure. Before you even open GA4, write down the 3-5 actions that matter for your business: contact form submission, phone number click, purchase, newsletter signup, quote request. This list drives the entire setup.
Skip the third point and you end up with a GA4 that counts visits but not conversions, which is exactly the data you need to make decisions.
Step 1: create the account and the property
Go to analytics.google.com and sign in. GA4 is organized into three levels: an account (your company), a property (the site or app), and a data stream (the actual source).
- From Admin (the gear icon in the bottom left) click Create, then Account. Give it a name (usually your company's) and set the data-sharing options.
- Create the Property: site name, time zone (GMT+1) Italy, and currency Euro (EUR). Careful: time zone and currency need to be set correctly right away, because changing them later doesn't recalculate data you've already collected.
- Fill in the business details (industry, size) and goals. These only shape the suggestions you get and have no effect on tracking.
Step 2: configure the data stream
You'll be asked to pick a platform: Web, iOS, or Android. For nearly every small business, it's Web.
- Enter the site URL (with https://) and a name for the stream.
- Leave Enhanced measurement turned on: GA4 automatically logs scrolls, clicks to outbound sites, on-site searches, file downloads, and video plays. It's free tracking you don't have to code.
- Copy the Measurement ID, the code in the G-XXXXXXXXXX format. You'll need it in the next step.
Step 3: install the tag on your site
You have three routes here, from simplest to most flexible.
Plugin or native CMS integration
On WordPress, use Google's Site Kit or a GA4 plugin and paste in the Measurement ID. On Shopify, GA4 integration is native: you'll find it in the settings, and if you sell online it's worth following the dedicated process to connect Shopify to GA4 so it also tracks purchase events.
Google Tag Manager (recommended)
GTM is a container that manages every tag from a single interface, without you touching the code each time. It takes half an hour more to set up, but it pays off: adding the Meta pixel, a custom event, or Consent Mode becomes a matter of clicks. For any small business that will also run advertising, it's the right choice.
Direct Google tag
You can paste the gtag.js code by hand into the head section of every page. It works, but it gets awkward as soon as you add other tools. If you're starting today, go with GTM instead.
Step 4: set up key events (your conversions)
In GA4, everything is an event: a page view, a click, a purchase. The events that actually matter get marked as key events (they were called "conversions" until 2024, and you'll still find them under that name in Google Ads).
Take the list from step zero and create an event for each of those actions. There are two main routes:
- Events already collected: if enhanced measurement already captures the action (form_submit, for example), just go to Admin > Events and flip the "Mark as key event" switch.
- Events you need to create: for specific actions (a click on a WhatsApp button, a particular form submission), create the event in GTM or with GA4's "Create event" feature.
If you run an ecommerce store, tracking needs to go deeper (product views, add-to-cart, purchase with value): it's worth following a dedicated ecommerce events checklist. And once the data starts coming in, deciding which GA4 metrics are actually worth watching keeps you from drowning in reports you never use.
Step 5: Consent Mode v2 and privacy
This is the step small businesses skip most often, and it's also the one with legal implications. In Europe you can't track users without their consent, and since March 2024 Google requires Consent Mode v2 to use data in Google Ads audiences and remarketing.
In practice, you need two pieces that talk to each other:
- A cookie banner (Cookiebot, Iubenda, CookieYes, or similar) that collects consent.
- Consent Mode v2, which tells Google whether the user accepted or not, adjusting what gets tracked accordingly.
Setting it up correctly takes care: we walk through it step by step in the Consent Mode v2 guide for small businesses. On the compliance side, GA4 doesn't store IP addresses, and with the EU-US Data Privacy Framework in force since July 2023, transferring data to the United States now has a legal basis that was missing back when Italy's data protection authority (Garante) flagged concerns over Universal Analytics. It's still good practice to sign a data processing agreement (DPA) with Google and update your privacy policy. This is informational: for compliance specific to your case, check with a privacy consultant.
Want tracking that doesn't stop at the site, but actually talks to your campaigns and your CRM? Tell us about your current setup and we'll tell you what to fix first.
Step 6: connect Google Ads and your CRM
GA4 on its own tells you what happens on your site. The real value, for anyone acquiring customers, shows up once that data leaves the site and connects to everything else.
- Google Ads: in Admin > Product links, connect the account. That way you import key events as conversions and your campaigns optimize toward real actions, not just clicks.
- CRM: for a B2B business or a long sales cycle, the real conversion isn't the form, it's the contract signed weeks later. Feeding back to Google which leads turned into customers (so-called offline conversions from your CRM) is what separates tracking that just measures from tracking that actually saves you budget.
To keep traffic sources traveling cleanly between campaigns, site, and CRM, set a UTM parameter convention from day one: without it, a big chunk of traffic ends up dumped into "direct" and you lose track of where it actually came from.
Step 7: settings you shouldn't forget
- Data retention: in Admin > Data settings > Data retention, bump the value from 2 up to 14 months. By default GA4 only keeps detailed data for 2 months, and you need at least 14 to compare one year against the last.
- Exclude internal traffic: define your office's IP so your own visits don't pollute the data. Remember to set the filter to "Active": by default it launches in test mode and filters out nothing.
- Google Signals: consider whether to turn it on for demographic data, keeping the privacy implications in mind.
The validation checklist: verify it actually works
Configured doesn't mean working. Before making decisions based on the numbers, check these six points:
- Realtime report: open the site in an incognito tab and check that your visit shows up in the Realtime report within a few seconds.
- DebugView: using the Tag Assistant extension or GTM's preview mode, verify in DebugView that events fire when you perform the action (submit the form, click the button).
- Key events: do a test conversion and check that it shows up among the key events after 24-48 hours.
- Consent: reject cookies from the banner and verify tracking behaves accordingly, then accept and check again.
- Internal traffic: make sure the filter is active and that office visits aren't being counted.
- Sources: after a few days, look at the acquisition report and check that the sources make sense (little "unassigned" traffic, readable UTMs).
If these six points check out, you can trust the data.
The most common mistakes
- Double tagging: GA4 installed both via plugin and via GTM doubles your numbers. Keep just one.
- No key events: you measure visits but not conversions, which is the only data point you actually need to make decisions.
- No Consent Mode: you lose data and take on privacy risk.
- No verification: you assume it works and discover months later that an event never recorded anything.
Where to start
Follow the steps in order: property, data stream, tag, key events, consent, connections, settings, validation. If you're short on time, there are three absolute priorities: install the tag once, mark the key events, and configure Consent Mode v2. Refine everything else as you go. And once GA4 is up and running, the next step is turning those numbers into decisions by connecting them to your campaigns and to the system that turns contacts into customers.
Frequently asked questions
Is GA4 free?
Yes, the standard version is free and covers what nearly every small business needs. There's a paid version, GA4 360, built for high volumes and enterprise needs.
How long does it take to set up GA4?
A basic setup (property, tag, enhanced measurement) takes about an hour. Add custom key events and a properly configured Consent Mode v2, and budget two to three.
What's the difference between Universal Analytics and GA4?
Universal Analytics stopped collecting data on July 1, 2023. GA4 uses an event-based model (rather than sessions and pageviews) and handles web and app together.
Is Google Tag Manager better than the direct tag?
For any small business planning to run advertising, Google Tag Manager is the better choice: you manage every tag from a single interface, and adding pixels or events becomes a matter of clicks, without touching your site's code.
Is GA4 GDPR compliant?
Not automatically. You need to configure Consent Mode v2, have a valid cookie banner, sign the DPA with Google, and update your privacy policy. For your specific case, check with a privacy consultant: guidance from the Garante remains the reference point.
What are key events in GA4?
They're the events you mark as important for the business (forms, purchases, calls). They were called conversions until 2024, and you'll still find them under that name in Google Ads.
Would you rather have people who do this every day set up GA4, Consent Mode, and conversions for you? Request an analysis of your tracking and we'll start from there.