Support/Legal & Policies/How analytics are added
Legal & Policies

HOW ANALYTICS ARE ADDED

2,345 views
analyticsprivacy

Analytics tracking is implemented by our Technology department during technical staging, balancing accurate event collection with strict UK GDPR consent compliance.

Analytics tracking is integrated by our Technology department during the staging phase, using either native code implementation, tag containers, or lightweight privacy-first telemetry. Every tracking setup is balanced against UK data privacy regulations, ensuring no non-essential scripts execute before a visitor grants explicit consent.

The implementation process

Analytics configuration follows a structured path managed entirely within our Technology team during normal studio operating hours (Monday to Thursday, 09:00-17:00 GMT).

1. Specification review: We assess your measurement requirements against your chosen platform (such as Google Analytics 4, Plausible, Fathom, or custom telemetry). We confirm which user journeys, page views, and outbound interactions need tracking. 2. Staging integration: Code snippets, tracking pixels, or container scripts are added directly into your codebase or tag manager in the staging environment. Scripts are wrapped in conditional triggers linked to your consent mechanism. 3. Event mapping: Custom conversions—such as form submissions, enquiry clicks, and e-commerce transactions—are instrumented using structured data layers and semantic event naming. 4. Consent verification: We audit the network tab to verify that no analytics beacons dispatch when a user rejects cookies or before they interact with the consent banner. 5. Production deployment and live validation: Once you approve the staging build, the changes are released to production. We generate real-time test events to verify data flow within your analytics dashboard.

What you need to supply

To prevent deployment delays, your assets must be submitted before the technical sprint begins. We require:

  • Platform credentials or identifiers: Your Measurement ID (such as a GA4 `G-` ID), container ID, or platform-specific script source.
  • Direct access: Administrator or editor permissions granted to our team within the analytics portal if we are responsible for configuring custom goals, audiences, or dashboards.
  • Defined conversion points: A written list specifying exactly what counts as a completed goal (for example, submission of a bespoke quote request or newsletter signup).
  • Consent tool access: Credentials for your standalone consent management platform, if you do not use our built-in staging consent framework.

Privacy and consent controls

Xylora Groups LTD builds all digital infrastructure to comply with UK GDPR and Privacy and Electronic Communications Regulations (PECR).

If you select traditional tracking tools that store non-essential cookies, we must deploy a blocking cookie banner. The Technology department configures this banner to prevent tracking libraries from loading until affirmative consent is logged. If a visitor declines, the scripts remain disabled for that session.

For clients wishing to avoid intrusive banners, we recommend privacy-centric, cookieless analytics tools. These platforms record page views and referral paths without processing identifiable personal data or placing persistent identifiers on user devices, eliminating the statutory requirement for prior consent.

Typical failure scenarios

Analytics failures are generally caused by permission bottlenecks, aggressive client-side caching, or conflicting third-party code. Common issues include:

  • Missing container permissions: The client provides an ID but restricts access rights, preventing us from publishing event tags or linking data streams. Work pauses until user permissions are updated.
  • Ad-blocker masking during review: Clients testing their live site often report missing events because their personal browser extensions block the tracking script. Testing must be conducted via a clean browser profile or dedicated debug mode.
  • Unregistered DOM changes: Modifying third-party embedded forms or button IDs outside our repository will sever custom event triggers. Any alterations to source elements require updated event listeners.
  • Double-counting: Occurs when an automated website plugin injects a duplicate analytics script alongside our manually configured container. We will identify and purge duplicate headers during testing.

If data stops flowing post-deployment, contact us via the Ask Xylo chat on this portal. Enquiries receive a first reply within 24 hours during our working week.

Analytics readiness checklist

Before handoff to the Technology department, verify that you have completed the following items:

  • [ ] Analytics account created and verified under your organisation's ownership.
  • [ ] Measurement ID, tracking key, or Tag Manager container ID provided in writing.
  • [ ] Platform access granted to Xylora Studios at administrator or editor level.
  • [ ] Decision confirmed on whether you require cookie-based or privacy-first cookieless tracking.
  • [ ] Explicit list of key conversion events supplied.
  • [ ] Existing or duplicate tracking scripts removed from your DNS or CMS plugins.

Was this helpful?

Tell us honestly. It is read by the people who write these pages.

If this didn't answer your question, ask Xylo.

Back to Legal & Policies