Ownership & buyer kit

Know exactly whatyou own

A plain-language guide to who actually controls your website — and the questions to ask before you sign with anyone, including us.

GuideVersion 1.0Updated

Why this exists

Most business owners find out they don't actually control their own website at the worst possible time — when they want to switch providers, a freelancer disappears, or a bill goes to a card that no longer works. This kit is the questions and checklists to ask now, while everything is still working, so a future problem is an inconvenience instead of an emergency.

It's written in plain business language on purpose. You don't need to understand hosting to use it — you need to know what to ask, and what a good answer sounds like. Not every business uses the same services for every piece below; that's normal. What matters is that you know which ones are yours.

01. Domain and registrar control

Your domain name (yourbusiness.com) is registered somewhere — a registrar like GoDaddy, Namecheap, Cloudflare, or Google Domains. Whoever has the login to that registrar account controls where your website and email actually point.

It's common for a designer or agency to register the domain "on your behalf" during setup. That's convenient at launch and a real problem later if the relationship ends and you can't get the login.

What to check

  • Confirm which registrar the domain is registered with, and that the account is in your name and email address — not your provider's.
  • Get (or reset) the login yourself. Turn on two-factor authentication and keep the recovery email current.
  • Check the expiration date and who is billed for renewal.

02. Hosting and platform control

Hosting is the account that actually serves your website files to visitors — anything from a traditional web host to Cloudflare, Netlify, Vercel, Shopify, Squarespace, or WordPress.com. Not every business uses the same setup, and that's fine; what matters is knowing which one is yours and who holds the keys.

A designer building on their own hosting account under their own login is a normal way to start a project. It becomes a risk only if it never transfers to you.

What to check

  • Confirm whether hosting is in your name/account or your provider's. If it's theirs, ask what it takes to move it to yours.
  • Get owner- or admin-level access, not just a viewer login.
  • Know the hosting cost, billing cycle, and who is charged.

03. Website files or repository

Depending on how your site was built, "the website" might be a folder of files, a page builder project, or a code repository (like GitHub). Some platforms make an export easy; others make it difficult or impossible to take your design with you.

You don't need to understand the code. You do need to know whether a copy exists that you can access without your current provider's cooperation.

What to check

  • Ask directly: "If I stopped working with you today, could I get a full copy of my website?"
  • If the answer is yes, ask for that copy now and store it somewhere you control.
  • If the platform doesn't support exporting, know that going in — it's a real tradeoff, not a dealbreaker by itself.

04. Administrator access

Separate from hosting and domain accounts, most websites have their own admin login — a CMS dashboard, a page builder, or a booking/ecommerce backend. This is the account you'd use day to day to update content.

A business that has never logged into its own website admin panel has a gap worth closing, even if everything is currently working fine.

What to check

  • Confirm an administrator (not just editor) account exists in your name.
  • Log in once, even if you never plan to make changes yourself, so you know it works.
  • Store the login somewhere your business would still have it if a specific employee left.

05. Analytics and Search Console

Google Analytics (or a similar tool) shows who visits your site and what they do. Google Search Console shows how your site is doing in search results and flags indexing problems. Both should be tied to a Google account your business controls — not a personal or agency account you might lose access to.

What to check

  • Confirm which Google account owns your Analytics property and Search Console. Add your own business email as an owner if it isn't already.
  • Check that data is actually being collected — an analytics tag installed but never verified is common.
  • Ask who currently looks at this data, if anyone.

06. Business email and form-delivery services

Business email (you@yourbusiness.com) usually runs through a separate service — Google Workspace, Microsoft 365, or your hosting provider's mail tool. It's billed and managed separately from your website itself.

Contact-form submissions also depend on a delivery service behind the scenes. A form can look like it works while its emails are quietly failing to arrive — this is one of the most common silent failures on small-business sites.

What to check

  • Confirm which service handles your business email, who is billed, and who has admin access.
  • Confirm which service delivers your form submissions, and that you've actually tested it recently (see the Website Acceptance Test).
  • Know where a lost form submission would go, and who would notice.

07. Payments, scheduling, ordering, and integrations

If your site takes payments, bookings, or orders, that usually runs through a third-party service — Stripe, Square, Calendly, Acuity, a scheduling plugin, an ecommerce platform, or something industry-specific. These accounts are almost always separate from your website hosting.

Not every business needs all of these, and the right mix depends entirely on how your business operates — there's no single correct stack.

What to check

  • List every paid or no-cost third-party tool connected to your site (payments, booking, ordering, chat, reviews, etc.).
  • Confirm the account for each is in your business's name, with your own login.
  • Know the transaction fees, monthly costs, and cancellation terms for each.

08. Billing and renewals

Domain, hosting, email, and every integration above usually renew on their own schedule — monthly, yearly, or multi-year. It's easy to lose track of which card is on file where, especially if a provider set things up during launch.

What to check

  • Make one list of every recurring website-related charge: what it is, the amount, the billing date, and the card/account charged.
  • Move billing to a card and email your business controls directly, where possible.
  • Set a calendar reminder ahead of your domain's renewal date specifically — an expired domain can take your email down with it.

09. Backups and exports

A backup is a saved copy of your site and its content from a specific point in time — separate from the live version. Some hosting platforms back up automatically; others don't, or only for a short rolling window.

What to check

  • Ask whether backups exist, how often they run, and how far back they go.
  • Ask how you would actually restore from one if something broke.
  • If nothing is backed up automatically, export what you can (content, images, a database dump if applicable) and store a copy yourself.

10. Website handoff

A proper handoff at the end of a project means you receive (or confirm access to) every account above — domain, hosting, files, admin login, analytics, email, and any integrations — in writing, in one place.

This is also exactly what the Website Acceptance Test is for: a concrete way to confirm handoff actually happened before you sign off.

What to check

  • Ask for a single handoff document listing every account, its login owner, and renewal date.
  • Don't make the final payment (if one is outstanding) until access is confirmed, not just promised.
  • Keep the handoff document somewhere your business would still have it in five years.

11. Vendor comparison and platform portability

Some platforms make it straightforward to leave — export your content, point your domain elsewhere, done. Others are effectively closed systems: the design, content, and sometimes the domain itself are hard or impossible to move without starting over.

Neither approach is automatically wrong. A closed platform can still be a reasonable choice if the price and support are right for your business. The problem is not knowing which one you're in.

What to check

  • Ask directly: "If I wanted to switch providers or platforms in two years, what would that actually involve?"
  • Compare at least two options on this specific question before committing — not just on price.
  • Weigh lock-in against convenience honestly. A locked-in platform that saves you real time every month may still be worth it.

12. Questions to ask a designer or agency before you sign

These are meant to be asked plainly, before any contract is signed — of us or of anyone else.

What to check

  • "Whose name will the domain and hosting be registered under?"
  • "If I stop paying or the relationship ends, what exactly do I keep?"
  • "Can I get a full export of my website, and in what format?"
  • "What happens to my email and forms if I switch providers?"
  • "What is included in the price, and what becomes a separate monthly cost later?"
  • "What does cancellation actually cost, in fees and in lost work?"

13. What it actually costs over one, three, and five years

A website's real cost is rarely just the number on the first invoice. Hosting, domains, email, maintenance, and add-ons compound over time — and a low upfront price can hide a higher long-term one, or the reverse.

The Website Cost Calculator below does this math for you, side by side, using your own numbers instead of a generic estimate.

What to check

  • Add up every recurring cost from the Billing & Renewals section above for one full year.
  • Multiply the recurring total by three and by five, then add any one-time costs you expect in that window (a redesign, a migration).
  • Compare that number to the upfront price you were quoted — they answer different questions.

14. If your provider disappears

Freelancers change careers. Agencies close. Platforms shut down or get acquired. It doesn't happen often, but when it does, the businesses least affected are the ones who already knew the answers in this kit.

What to check

  • Confirm today that you (or someone at your business) can log into the domain registrar without anyone else's help.
  • Confirm you have a working backup or export stored outside your provider's systems.
  • Keep one document with every login, account owner, and renewal date — updated whenever something changes.

This kit is general, plain-language guidance — not legal or financial advice. Contract terms vary by provider; when in doubt, read yours or ask a professional who can review it directly.

Complimentary website preview

Want a second opinion on a contract or acurrent site?

Tell me what you're looking at and what's worrying you. I'll give you a straight answer, even if it's not about hiring us.

See what your business could look like online, with no obligation to purchase.

Complimentary Preview