Who owns my website? Getting your domain back from a designer

You paid someone to build your website, the relationship went sour, and now they will not give you the logins. Or they have gone quiet and the domain renewal notice is going to their inbox, not yours. This is one of the most common questions small-business owners ask about websites, and the answer starts with a fact many people never check: who is actually listed as the owner of the domain.

This guide walks through how to find out, the three separate logins that make up "your website", how to ask for them in writing, and what to do if the designer still refuses. It is general information for Ontario businesses, not legal advice.

Who owns my website? Getting your domain back from a designer at a glance — the short version.

Step 1: find out whose name the domain is in

The domain (yourbusiness.ca or yourbusiness.com) is the piece that matters most. Whoever is the registrant, also called the registered name holder, controls where it points and whether it renews. If your designer registered it under their own name or company, they hold it on paper, even if you paid for it.

For a .com, run your domain through ICANN Lookup. ICANN's domain name holder FAQ says the "Registrar" field shows who your registrar is. ICANN describes RDAP as the replacement for the old WHOIS protocol, and says registries and registrars have not been required to offer WHOIS since 28 January 2025, with a few exceptions. For a .ca, the Canadian Internet Registration Authority (CIRA) runs the registry and its own lookup at cira.ca.

Many lookups hide the owner's personal details for privacy, so you may only see the registrar's name. That is still useful: the registrar is the company you deal with next, and it can tell you what it needs to confirm you are the holder.

Step 2: list the three logins that make up your website

"Access to my website" usually means three different accounts, often with three different companies:

• Registrar account: where the domain is registered and renewed (for example a Canadian registrar for a .ca). Whoever controls this can move the domain anywhere.
• Hosting account: the server where the site's files and database live. Without it you cannot take a backup or move the site.
• Site admin: the WordPress, Shopify, Wix or Squarespace login where you edit pages. Ask for an owner or administrator role, not an editor role.

Two more are easy to forget: your business email if it runs on the same domain, and Google Search Console. Google says a verified owner has full control of a Search Console property, only owners can add or remove users, and if all verified owners are removed the remaining users lose access after a grace period. Make sure you are a verified owner, not just a user.

Step 3: ask in writing, once, with a deadline

Most handover problems end with a clear email. Keep it short and factual: list what you paid for, the domain name, and exactly what you want: the registrar account (or the domain moved into an account in your name), hosting access or a full backup, an administrator login, and the transfer code for the domain.

The transfer code, also called the Auth-Code or AuthInfo code, is what a new registrar needs to move the domain. For generic domains such as .com, ICANN says the registrar must provide the AuthInfo code within five calendar days of the holder's request, and that a change of registrant is started by contacting the current registrar, which then asks the holder to confirm. Note the catch: those rights belong to the registrant. If the designer is listed as the holder, the registrar will deal with them, not you.

Also ask about the content and code. Under section 13 of Canada's Copyright Act, the author of a work is the first owner of its copyright, and an assignment is not valid unless it is in writing and signed by the owner. If your contract says nothing about ownership, that is a gap worth raising with a lawyer.

Step 4: if they refuse, use your payment and the courts

If you paid by credit card and the work was never delivered, call your card issuer. National Bank's guide to disputing a credit card transaction says to first discuss the problem with the seller, keep as much proof as possible, and that statement errors must be reported within 60 days. Card issuers set their own rules and time limits, so act quickly and ask yours what applies.

If you are owed money, Ontario's Small Claims Court handles civil claims valued up to $50,000, Your written request from Step 3 becomes your evidence.

Step 5: the CIRA dispute process, and why it rarely fits

For .ca names, CIRA's Domain Name Dispute Resolution Policy (CDRP) is a forum for bad-faith registrations that is meant to be relatively inexpensive and quick. To win, you must prove on a balance of probabilities that the domain is confusingly similar to a mark you had rights in before it was registered, that the registrant has no legitimate interest, and that it was registered in bad faith. If you win, the panel decides whether the domain is deleted or transferred to you.

Bad faith in the policy includes registering a name to sell it to the mark holder for more than the registration cost, or to disrupt a competitor's business. A designer who simply registered the name for your project may not fit neatly. It also costs money: CIIDRC, a dispute provider, lists a commencement fee of $1,000 plus tax, with panel fees on top. Treat it as a last resort, and talk to a lawyer first.

A six-item handover checklist before you pay a designer

Prevention is far cheaper than any of the steps above. Before the final payment, confirm each of these:

1. The domain is registered in your business's name, in a registrar account you log in to, with your email on it.
2. The hosting account is in your name, or you have a full backup of files and database.
3. You have an owner or administrator login to the site's admin panel.
4. You are a verified owner in Google Search Console and an admin on Google Analytics and your Google Business Profile.
5. The contract assigns copyright in the design, code and content to you in writing, signed.
6. You have a one-page list of every account, renewal date and who pays for it.

The bottom line

Whoever is listed as registrant controls the domain, so check that first, then get the registrar, hosting and admin logins in your own name. A polite written request solves most cases. Card disputes and Small Claims Court are there if you paid for work you never received, and the CIRA dispute process is for real bad-faith registrations.

If you are starting over, read our breakdown of freelancer, agency or DIY website costs and what a $1,000, $2,000 and $5,000 website gets you in Ontario. At Nova Toronto, our website design packages are fixed-price, from $900 for a three-page site to $5,000 for custom work. Want to manage more of it yourself? Our free AI course for beginners is a good start.

Common questions

How do I find out who owns my website domain?

Look up the domain with ICANN Lookup for a .com, or CIRA's lookup for a .ca. The result names the registrar. Personal details are often hidden for privacy, so contact that registrar and ask how to confirm whether you are the registered holder.

Can a web designer legally keep my domain name?

If the designer registered the domain in their own name, they are the registrant on paper, even if you paid. Whether they must hand it over depends on your contract and what was agreed. Ask in writing first; if that fails, consider a card dispute, Small Claims Court or, for a .ca, the CIRA dispute policy. Talk to a lawyer for your situation.

How do I transfer my domain away from my developer?

Get the transfer code (Auth-Code) from the current registrar and give it to the new registrar. For .com and similar domains, ICANN says the registrar must provide it to the holder within five calendar days. If the developer is the listed holder, they must request it or move the domain into your name first.

Who owns the website design and content I paid for?

Under section 13 of Canada's Copyright Act, the author is the first owner of copyright, and an assignment must be in writing and signed. If your contract does not assign the design, code and content to you, ask for a signed assignment. This is general information, not legal advice.

New to AI? Take our free 7-lesson AI course for beginners.

Sources: ICANN: Domain name holder FAQs (transfers, AuthInfo code, change of registrant) • ICANN: Registration Data Access Protocol (RDAP) • ICANN Lookup • CIRA: Domain Name Dispute Resolution Policy (CDRP) • CIIDRC: Guide to filing a CDRP complaint • Justice Laws Website: Copyright Act, section 13 • Ontario Superior Court of Justice: Small Claims Court • National Bank: How to dispute a credit card transaction • Google Search Console Help: Managing owners, users and permissions

Related reading: Our website design services • Freelancer, agency or DIY: what each website route costs • What a $1,000, $2,000 and $5,000 website gets you in Ontario • Free AI course for beginners