Who Actually Owns Your Website? It Might Not Be You.
You've paid for your website. It's got your logo. Your company name. Your photographs. Your services. Lovely. But who controls the domain name? Who owns the hosting account? Who has access to the website files? And what happens if your developer disappears, retires or decides they no longer want to work with you? If the answer is "I think Dave handles all that", we've got a few things to discuss.
You Paid for the Website. Surely It's Yours?
Here's a scenario worth thinking about.
You commissioned a new business website.
The developer designed it, built it and put it online.
You paid the agreed invoices.
The website works perfectly.
Three years later, you decide the company needs a new developer.
Nothing personal.
You simply want somebody else to manage the site.
So you ask for the hosting login and website files.
That's when things become interesting.
The hosting account belongs to the original agency.
The domain was registered through their account.
Nobody in your company has administrator access.
And the contract doesn't clearly explain the rights to the custom code.
Suddenly, moving your website is considerably more complicated than expected.
This is the important distinction:
Legal rights and practical control are not always the same thing.
You may have contractual rights to certain work without currently having the credentials required to access it.
Equally, having administrator access doesn't necessarily mean you own the copyright in every component.
That's why business owners should understand both sides of the situation.
Can You Answer These Six Questions Without Asking Your Developer?
Before diving into the details, try this quick website ownership check.
| Question | What you should be able to establish |
|---|---|
| Who is the domain registrant? | The registered holder and who controls the registrar account. |
| Where is the website hosted? | The provider, account holder and authorised access arrangements. |
| Who can administer the website? | Named authorised users and emergency access arrangements. |
| Who holds the website files and database? | Where current backups live and how they can be restored. |
| What are the intellectual property rights? | What the contract says about ownership, assignments and licences. |
| Can you change suppliers? | What can be exported or transferred, subject to agreements and technical limitations. |
Not Sure
You don't yet know who controls the key accounts. Start by documenting the arrangements.
Potential Risk
Access depends entirely on one person or supplier, with no documented recovery process.
Better Prepared
The company understands its rights, controls appropriate accounts and has workable backup and transfer arrangements.
Domains, hosting contracts, website content, source code, third-party software and customer information can involve different rights and responsibilities.
In the UK, contractual wording and applicable intellectual property law matter. This guide is general information rather than individual legal advice.
10 Things Every Business Owner Should Know About Their Website.
You don't need to be a developer to understand these basics.
You simply need to know where the important accounts are, who controls them and what happens if something changes.
Who Is Your Domain Registered To?
Let's start with your website address.
The domain name customers type into their browser.
Perhaps it's yourcompany.co.uk.
Who registered it?
Was it created under a company-controlled registrar account?
Or did the developer register it using their own details?
Domain names are generally registration rights governed by registry and registrar terms, rather than physical property you buy outright.
For a .uk domain, the registered holder and account arrangements are particularly important.
If the wrong party is listed, resolving a transfer or dispute may take extra work.
What can go wrong?
Renewals fail, control is unclear, or the business cannot make an authorised change when needed.
What should you check?
Identify the registrar, registered holder, renewal arrangements, recovery email and authorised account access.
Useful starting point: Review your registrar records and, for .uk domains, the guidance from Nominet.
Who Controls Your Hosting Account?
Your website needs somewhere to run.
That might be shared hosting, a virtual server or a managed platform.
Your developer may quite reasonably provide managed hosting as part of the service.
There's nothing inherently wrong with that.
The problem comes when the business doesn't understand the arrangement.
Can you move the website to another provider?
Who pays for renewals?
What happens to the site if the hosting agreement ends?
What can go wrong?
The website relies on an agency-controlled account with no documented migration or continuity plan.
What should you check?
Identify the provider, account owner, service arrangement, renewal terms and agreed exit process.
Remember: Managed hosting can be perfectly suitable, provided responsibilities and exit arrangements are clear.
Do You Have Your Own Website Administrator Account?
Your WordPress website has an administration dashboard.
You can update pages, manage content and administer relevant settings depending on your permissions.
But who has the highest level of access?
If your developer is the only administrator, that creates a dependency.
A well-managed business should understand how authorised administration can continue if the developer is unavailable.
This does not mean every employee needs administrator access.
Quite the opposite.
High-level access should be restricted and protected.
What can go wrong?
One person controls all accounts, credentials are shared, or the company cannot administer the website independently.
What should you check?
Ensure suitable company-authorised administrator access, named user accounts, appropriate roles and strong authentication.
Security tip: Avoid shared passwords. Use individual accounts and multi-factor authentication where available.
Who Owns the Website Design and Code?
You've paid a developer to create a website.
So do you automatically own the copyright in the code?
Not necessarily.
Under UK copyright rules, the position can depend on who created the work, their employment status and the agreement between the parties.
For example, commissioned work by an independent contractor doesn't automatically transfer all copyright to the customer merely because the customer paid for it.
A valid copyright assignment generally needs appropriate written formalities.
Your contract might instead provide a licence to use the work.
That may be completely suitable.
What's important is understanding what you can legally use, modify, transfer and maintain.
What can go wrong?
The company assumes it owns all bespoke work but the contract grants only limited usage rights.
What should you check?
Review copyright assignments, licences, source-code delivery, modifications and third-party components.
Important: Having a copy of source code is different from owning the intellectual property rights in it. Seek qualified legal advice where rights are unclear or disputed.
Who Has the Website Files and Database?
A website isn't necessarily just a collection of pages.
It may include databases, product information, user accounts, configuration, uploaded files and application code.
If your current hosting fails, can the website be restored?
If you change supplier, can appropriate files and data be transferred?
A backup is only useful if the necessary information can actually be recovered.
What can go wrong?
Backups are incomplete, inaccessible, outdated or never tested for restoration.
What should you check?
Confirm backup scope, storage, frequency, retention, restoration tests and authorised export arrangements.
Remember: Data protection obligations may apply to customer information held within the website and its backups.
Are Your WordPress Plugins and Themes Licensed Properly?
A WordPress website may use a commercial theme, extensions or external services.
Some subscriptions are in the company's name.
Others may be provided through the agency's account.
That can be perfectly reasonable.
But what happens when the commercial relationship ends?
Will premium updates continue?
Will support still be available?
Does the new developer need separate licences?
WordPress itself is open-source software, but associated commercial products and services may have distinct licensing and support arrangements.
What can go wrong?
Important premium updates or external services become unavailable after an agency agreement ends.
What should you check?
List themes, plugins and external services, their licences, account holders and ongoing costs.
Tip: Distinguish the licence governing software use from any subscription for support, updates or cloud services.
Who Controls Your Business Email and DNS?
This is where website problems can become much bigger.
Your domain may also be used for business email.
Your DNS settings help direct website traffic and email services to the correct destinations.
Change the wrong records and you may interrupt far more than the website.
Customer emails could stop reaching the company.
Verification services may break.
And some business systems may depend on domain-related configuration.
What can go wrong?
A migration changes essential DNS records without accounting for email and other connected services.
What should you check?
Identify the DNS provider, authorised access, email service and important existing records.
Important: Do not change DNS or nameservers casually. Document the configuration and plan changes with the appropriate technical support.
Who Owns Your Website Content and Images?
Your website contains written content, photographs, icons, graphics and perhaps videos.
Some may have been created by employees.
Some by freelancers.
And some may come from licensed image libraries.
These materials may be governed by different rights.
A website redesign doesn't automatically give you permission to use every image in every possible future campaign.
Similarly, paying for a logo or photographs doesn't necessarily answer every intellectual property question.
What can go wrong?
The company lacks clear evidence of rights to reuse or modify important visual assets.
What should you check?
Keep relevant creation agreements, assignments, image licences and permissions for third-party content.
Worth knowing: Your brand identity and the rights to individual creative assets may involve different legal issues.
Who Controls Google Analytics, Search Console and Integrations?
Your website may connect to Google Analytics, Search Console, advertising accounts, payment providers and other services.
Who administers them?
Are they controlled through suitable business accounts?
Or are they tied entirely to the developer's personal email?
If the business changes supplier, access to historical reporting and connected services may matter.
Each platform has its own ownership and permission model, so check the individual arrangements.
What can go wrong?
Reporting access, integrations or important account settings become difficult to manage after staff or suppliers change.
What should you check?
Review account administrators, billing, recovery methods, permissions and connected services.
Security: Review integration credentials and permissions during an authorised supplier handover.
Can You Move the Website Without Rebuilding It?
This might be the most useful question of all.
If you want to change hosting or developer, what happens?
Can the site be transferred to a compatible environment?
Do you have the appropriate files and database?
Are there third-party dependencies?
Is the website built on a proprietary platform that can't simply be exported as a fully functioning independent site?
Not all platforms offer the same portability.
That's not automatically a reason to avoid them.
But businesses should understand those limitations before choosing a solution.
What can go wrong?
The site depends on platform-specific functionality or undocumented services that cannot easily move elsewhere.
What should you check?
Ask for a documented migration process, export options, technical dependencies and agreed handover responsibilities.
Golden rule: The best time to understand your exit options is before you need them.
What Should Your Website Development Contract Actually Explain?
A useful website development agreement doesn't need to be impossible to understand.
But it should make important commercial and technical arrangements clear.
Deliverables
What exactly is being provided? Is source code, design material or documentation included?
Intellectual Property
Which rights are assigned, licensed or retained? When do any agreed transfers take effect?
Hosting and Domain
Who is responsible for registration, renewals, billing and control of key infrastructure?
Third-Party Licences
Which software, services or assets depend on external subscriptions?
Access and Security
Which parties receive access, what roles do they have and how is access revoked?
Exit and Handover
What information, files and support are provided when the agreement ends, and under what conditions?
Other relevant provisions may cover maintenance, warranties, payment, service levels, data protection, liability and dispute resolution.
The details depend on the project.
A basic brochure website and a complex custom business application may require very different agreements.
An invoice saying "Website Development — Paid" is not a complete explanation of intellectual property rights, licences or handover obligations.
When ownership and contract terms are commercially significant, have them reviewed by a suitably qualified UK legal professional.
Your Developer Has Disappeared. What Should You Do?
Imagine your developer is no longer responding.
You need to update the website.
Perhaps the hosting invoice is overdue.
Maybe the site has an error.
And nobody seems to know how to get access.
The most important thing is to avoid making the situation worse.
Don't guess passwords.
Don't change DNS settings without understanding the implications.
And don't give a stranger broad access just because they promise to fix everything immediately.
Identify the Services
Establish your domain registrar, DNS provider, hosting and website platform.
Gather Evidence
Find agreements, invoices, registration details and any previously authorised access records.
Contact Providers
Use official support and account recovery processes to establish available options.
Plan a Safe Handover
Assess backups, technical dependencies, access and contractual rights before making changes.
Where ownership is disputed, consider appropriate legal advice before taking action that might breach an agreement.
If the developer was operating a legitimate managed service, they may have contractual obligations and rights that need to be addressed.
The objective is an authorised and technically safe recovery.
The DigitalBooth Website Ownership Checklist
Use these questions to identify gaps in your current arrangements.
Do we know the registered holder, registrar and renewal arrangements?
Do we know who provides and administers our hosting?
Is suitable company-authorised administration access available and secure?
Does the agreement clearly explain copyright, licences and permitted modifications?
Are the necessary files and data backed up and recoverable?
Do we know which plugins, themes and services require ongoing licences?
Can authorised staff identify important DNS and email arrangements?
Are photographs, graphics, written content and brand assets appropriately licensed?
Are analytics, marketing and other important integrations under suitable control?
Do we understand how a lawful and technically safe supplier handover would work?
If your developer stopped working tomorrow, could the company keep the website online, maintain essential services and appoint someone else to manage it?
If you're unsure, you have a useful business continuity issue to investigate.
Your Website Should Be a Business Asset, Not a Permanent Mystery.
A website is supposed to support your business.
It shouldn't become a source of uncertainty every time you need an update.
At DigitalBooth, we work with WordPress websites, custom-coded websites and business applications.
The appropriate technology depends on the requirements of the project.
But whatever the platform, it makes sense for business owners to understand their important access arrangements, technical dependencies and contractual rights.
Sometimes the right solution is documenting what already exists.
Sometimes it's reviewing hosting, backups and account permissions.
Other situations may require more detailed technical investigation or qualified legal advice.
Our Digital Audit, Web Design and App Development services are relevant to different parts of website technology, maintenance and planning.
The aim is to help businesses make informed decisions about their digital systems rather than relying on assumptions.
Your Website Has Your Name on It. Make Sure You Know What That Means.
Your business depends on many things.
Your people.
Your customers.
Your processes.
And increasingly, your digital systems.
Your website is often one of the most visible.
That's why it makes sense to understand the important accounts and rights behind it.
Who registered the domain?
Who manages the hosting?
Who holds the code and data?
What licences are required?
And how would the business move to another supplier if necessary?
These questions aren't about distrusting every developer or agency.
Many providers manage websites responsibly and transparently.
It's about understanding the arrangements that protect business continuity.
So have that conversation with your developer.
Check your agreements.
Review your accounts.
Confirm your backups.
And make sure you know what happens if things change.
Because "Dave normally deals with that" is not a complete website continuity strategy.
Frequently Asked Questions
Select a question below to read the answer.
If I paid for my website, do I legally own it?
Not necessarily every component or intellectual property right. Ownership and licensing depend on the applicable law, creator arrangements and contracts. Review the written agreement and seek legal advice if necessary.
How can I find out who my domain is registered to?
Start with your domain registrar account and registration records. For .uk domains, Nominet provides registry information and guidance. Public information may be limited by privacy rules.
Can my website developer own the domain name?
A developer or agency may be the registered holder or control the registrar account, depending on how the domain was registered. Check the registration and contractual arrangements.
Does having WordPress administrator access mean I own the website?
No. Administrator access gives technical capabilities within the application but does not automatically transfer copyright, domain registration rights or ownership of hosting agreements.
Can I move my WordPress website to another hosting provider?
Many WordPress sites can be migrated to compatible hosting. The process may require files, databases, licences and configuration. Technical and contractual limitations should be checked.
Who owns a custom-coded website?
The rights may depend on employment and commissioning arrangements, copyright law, assignments, licences and third-party components. A written development agreement should clarify what is transferred or licensed.
What happens if my website developer disappears?
Identify the domain registrar, hosting provider and relevant accounts. Gather contracts and invoices, then use official authorised recovery routes. Avoid risky configuration changes, and consider technical or legal support as appropriate.
Should my business hold all website passwords?
Businesses should have appropriate authorised control and recovery arrangements, but not every employee needs full administrator access. Use role-based permissions, individual accounts, secure credential management and multi-factor authentication where available.
Can DigitalBooth help review our website setup?
DigitalBooth offers Digital Audits, Web Design and App Development for businesses exploring website and application improvements. Legal ownership disputes should be handled with appropriately qualified legal advice.
Not Sure Who Controls Your Business Website?
DigitalBooth helps businesses examine website technology, hosting arrangements, technical dependencies and opportunities for improvement.
Whether you're planning a redesign, reviewing an existing platform or preparing for a supplier change, understanding the current setup is a sensible place to start.
Explore DigitalBooth Digital Audits →
