If you're using Google Analytics to track visitors, you need their permission beforehand.

If you're tracking visitors uniquely so that click-throughs to merchants earn you revenue via affiliate schemes, you need their permission for that, too.

See https://law.stackexchange.com/questions/82133/are-auto-gener...