You should own your domain, website, hosting and ad accounts outright — the agency should have access to them, not title to them, so you can leave without losing anything.
Who legally owns your website, domain and ad accounts when an agency manages them?
You do — or you should. A domain, hosting account, website and advertising account are your business assets no matter who set them up, but ownership follows whoever’s name and email the account is registered under, which is why so many businesses discover they own less than they thought.
There is a gap between who paid for something and who controls it. You can pay an agency every month for two years and still not be the registered owner of your own domain if it was bought under the agency’s registrar account with the agency’s email. Control lives with the account holder, not the invoice payer, and that distinction is where disputes start.
Each asset has its own notion of ownership. A domain has a registrant on record with the registrar. Hosting has an account holder. A Google Ads account has an owner and can sit under a manager (MCC) account. A Meta ad account lives inside a Business Manager that someone owns. A website is files and a database that physically sit on a server someone controls. None of these automatically belong to you just because the campaigns run for your business.
The healthy arrangement is simple: you own the account, the agency is granted access as a user or admin, and that access can be removed the day you part ways without touching anything underneath it. We set clients up this way from the start because we would rather earn the next month than lock in the last one — a partner keeps you because you want to stay, not because leaving is painful.
When you cannot tell who owns what, assume nothing and check everything. The next sections walk through how each asset should be structured, how to audit what you have now, and how to recover control if it is currently sitting somewhere it should not be.
How should each asset be set up so you keep control?
Every asset should be registered or owned under your own business email and account, with the agency added as a user or admin. That single principle — you own, they access — keeps you in control across the domain, hosting, website, ad accounts and analytics.
The pattern that protects you is the same everywhere: create the account under an email address your business controls, then invite the agency in at whatever permission level the work needs. When the work ends, you remove them and lose nothing. When the account is created under the agency’s email instead, removing them means removing yourself.
Use a dedicated business email for ownership — something like admin@yourcompany.com rather than a founder’s personal Gmail or, worse, an employee who might leave. That email becomes the master key to your domain registrar, hosting, Google account and Meta Business Manager, so it should be an address the business will always hold and whose password and recovery you control.
For advertising specifically, the right structure is that you own the Google Ads account and the Meta ad account, and the agency links them to its manager account for access. Linking is reversible in a click; it does not transfer ownership. An agency that instead runs your spend inside an account it owns keeps your entire campaign history, audience data and conversion learning when you leave.
The table below sets out where ownership should sit for each asset and what the agency’s role should be instead.
| Asset | Who should own it | Agency’s correct role | What it costs you if the agency owns it |
|---|---|---|---|
| Domain name | Your business, registered under your email at the registrar | Manage DNS as a delegated user | Your web and email address is hostage; moving it needs the agency’s cooperation |
| Hosting / server | Your business account | Deploy and maintain with access | You cannot move or back up the site without them |
| Website files & database | Your business | Build and maintain; hand over full export on request | You may lose the site itself, not just the login |
| Google Ads account | Your business (account owner) | Linked via the agency’s manager (MCC) account | You lose campaign history, conversion data and learning |
| Meta ad account | Your Business Manager | Assigned partner access | You lose pixel data, audiences and ad history |
| Google Analytics / GA4 | Your Google account | Editor or admin access | You lose all historical traffic and conversion data |
| Google Business Profile | Your business | Manager access | You lose control of how you appear in local search |
What actually goes wrong when the agency owns everything?
You get held hostage: leaving means losing your website, your ad history, your analytics or your domain, and sometimes your email stops working too. The pain is worst at exactly the moment you have the least goodwill to negotiate with.
The domain is the sharpest failure. If your domain was registered under the agency and it also runs your business email off that domain, an ugly split can knock out your website and your email at once. We have seen Pakistani SMEs discover during a dispute that the person who could unlock their domain was a former freelancer who had stopped replying — the business was effectively locked out of its own name.
Ad accounts fail more quietly but cost more over time. When your spend has run inside an agency-owned Google Ads or Meta account, everything the platform learned about who converts — the conversion history, the trained audiences, the pixel data — stays with the account, not with you. You start the new agency from zero, which means paying again to relearn what you already paid to learn once.
Websites built on a platform or theme the agency controls are another trap. A site can be technically finished and still be impossible to move because you have no hosting login, no database export and no copy of the files. On Shopify or WooCommerce this is avoidable — both let the store owner hold the account and add collaborators — but only if it was set up that way.
The common thread is that none of this feels like a problem while the relationship is good. Access issues surface at the exit, when trust is already gone, and that is the worst possible time to be asking the other side for a favour. The fix is to structure ownership correctly at the start, when nobody has any reason to say no.
How do you check what you actually own right now?
Run an audit of every digital asset and confirm, for each one, that the account is registered under an email your business controls and that you have owner or admin access. Anything registered under the agency’s email or missing from your own logins is a risk to fix now.
Start with the domain, because it is the foundation. Look it up in a public WHOIS lookup and check the registrant details, then confirm you can actually log into the registrar account that holds it. Being listed as the registrant is not enough if you cannot get into the account — you need the login, not just the name on the record.
Then work through the rest: can you log into your hosting, your Google Ads account, your Meta Business Manager, your Google Analytics and your Google Business Profile, each with owner or admin rights, using an email your business owns? If any of these only open through the agency, or through a personal account belonging to one person, that is a gap.
Pay attention to who the ultimate owner is versus who merely has access. In Google Ads and Meta, being a linked or invited user is not the same as owning the account — check the account’s owner, not just that your login works today. Access granted can be access revoked.
Do this while things are calm. An agency that is confident in its work will happily walk you through your own access; that request is normal and reasonable. If it triggers evasion or delay, you have learned something important before you were ready to leave rather than after.
1Check the domainWHOIS registrant plus registrar login2Confirm hosting accessCan you log in and export?3Verify ad accountsAre you the owner, not just a user?4Check analytics & profilesGA4 and Google Business Profile admin5Fix any gaps nowTransfer or re-register under your email
What should you ask a new agency before you sign?
Ask, in writing, who registers each asset, whose email owns it, what access you will hold throughout, and how everything transfers back to you when the relationship ends. A good agency answers these plainly because it has nothing to protect by keeping you locked in.
The single most useful question is: will every account be created under my business email, with you added as a user? If the answer is yes and it is written into the agreement, most of the risk disappears. If the answer is vague, or the agency prefers to ‘handle all that’ under its own accounts, treat it as a warning.
Get the exit terms before you need them. A clean contract says what happens to your domain, website files, ad accounts and data when you leave — that they are handed over or that your access simply continues because it was yours all along. An agency planning to keep you through good work has no reason to resist this clause.
Ask specifically about advertising ownership. The correct answer is that you own the Google Ads and Meta accounts and the agency links them to its manager account for access. If a prospective agency wants to run your budget inside its own account, ask what happens to the conversion history and audiences when you leave — the honest answer is that you lose them.
This is exactly why we describe ourselves as a partner rather than a vendor. Dedicated account managers, full campaign transparency and access that belongs to the client are not favours we grant; they are the default, because a business that can leave any month and chooses not to is the only kind of client worth keeping.
How do you transfer your assets when you leave an agency?
Each asset transfers a different way: a domain moves between registrars with an authorization code, a Google Ads account is unlinked from the agency’s manager, a Meta ad account is reassigned inside Business Manager, and a website is exported as files and a database. None require the old agency’s permission if the accounts are yours.
Domains transfer under a standard process governed by ICANN. You unlock the domain at the current registrar, obtain the authorization (EPP) code, and use it to pull the domain to your new registrar. There is a mandatory waiting period and domains recently registered or transferred are locked for 60 days, so start early rather than at the deadline. If the domain is in the agency’s account, you need them to unlock it and release the code — which is precisely why owning it yourself matters.
For Google Ads, if you own the account you simply remove the agency’s manager account link and your account carries on untouched, history intact. If the account itself belongs to the agency’s manager, you cannot take the account — but you can request a new account of your own and, in some cases, ask the platform about migrating certain assets. History does not always follow, which is the cost of the wrong setup.
For the website, ask for a full export: the files and the database, or the platform’s native export if you are on Shopify or WooCommerce. Confirm you can host and open it before you cut ties. A finished-looking site you cannot move is not something you own.
Sequence the switch so nothing goes dark. Keep the domain and hosting live until the new site is confirmed working, keep ad accounts running until the new setup is verified, and change ownership emails and passwords once the handover is complete. Rushing the order is how businesses take their site or email offline mid-transfer.
Does this apply differently to Pakistani businesses and .pk domains?
The principles are identical, but .pk domains and local payment or ad setups add their own steps, so a business in Lahore, Karachi or Islamabad should check the specifics of its registrar and any local accounts rather than assume the global process covers everything.
A .pk domain is administered under Pakistan’s own registry (PKNIC) rather than the general ICANN registrar market, so the transfer and ownership-change steps differ from a .com. Whatever the extension, the same rule holds: the domain should be registered to your business, under contact details and an email you control, not your agency’s.
For businesses selling into Pakistan, the assets that matter most are often the ones tied to how customers pay and how ads reach them — your payment gateway or cash-on-delivery setup, your Meta and Google accounts, and your store platform. Each should sit under your business identity so that changing who runs your marketing never disturbs how you get paid.
Global brands entering the Pakistani market face the mirror image: a local agency may set up accounts on their behalf, and those accounts should be created under the brand’s own ownership from day one, with the local agency added for access. It is the same principle applied from the other direction.
Whether you are a local SME or an international brand, the safe default does not change: own the accounts, grant access, and keep the master email in the hands of the business itself.
Common questions
Can an agency legally refuse to hand over my website or domain?
It depends on who the accounts are registered under and what your contract says. If the domain and accounts are in the agency’s name, you may need its cooperation to release them, which is why ownership should be set up under your business from the start. A clear contract with defined exit terms removes most of the ambiguity.
I paid for everything — doesn’t that make me the owner?
Not automatically. Paying the invoice is not the same as being the registered account holder. Control follows whichever email and account something was created under, so a business can fund an asset for years and still not control it. Always confirm the account is under your own email, not just that you paid for it.
Will I lose my Google Ads conversion history if I switch agencies?
Only if the account itself belongs to the agency. If you own the Google Ads account and the agency simply linked it to its manager account, you unlink them and keep everything. If your spend ran inside the agency’s own account, the history and trained audiences generally stay with that account — one reason to check ownership before you start.
What email address should own all my accounts?
A dedicated business email such as admin@yourcompany.com that the business will always control, rather than a founder’s personal address or an employee’s inbox. That email becomes the master key to your domain, hosting and ad accounts, so it should have secure recovery and stay with the company regardless of who comes and goes.
How long does a domain transfer take?
Under the standard registrar process it usually takes several days once you unlock the domain and provide the authorization code, and domains registered or transferred within the last 60 days are locked and cannot move until that period passes. Start the process well before any deadline so you are not caught by the lock.
Is it rude to ask my current agency for full access?
No — it is a normal, reasonable request that a confident agency welcomes. Asking to confirm your own ownership and access is basic housekeeping, not an accusation. If the request is met with delay or evasion, that reaction is itself useful information about how a future exit would go.
How does BluPixel handle ownership for its clients?
We set every asset up under the client’s own ownership and add ourselves as a user, so access can be removed at any time without touching what sits underneath. That, along with dedicated account managers and full campaign transparency, is what we mean by being a partner rather than a vendor — clients stay because the work is good, not because leaving is hard.
