It usually surfaces on a bad day.
The site goes down, or the email stops, and someone goes looking for the renewal notice. It turns out the renewal notice has been going to an address at a company that stopped trading in 2021. Or the hosting is on a card that expired in March. Or you want to move the site somewhere else and the answer is that you cannot, not easily, and not without paying someone to rebuild the thing you already paid for.
None of that is a scandal, and in almost every case nobody behaved badly. It is just that at some point you were given access to your website, and access quietly became the thing you mean when you say you own it.
They are not the same. Access is something somebody gives you.
Why It Happens, and Why It Is Not Your Fault
When you started, somebody offered to sort the domain out.
That was a kind offer and you were right to take it. You were opening a business. Registering a domain means an account, a card, a set of DNS settings you have no reason to understand, and a decision about privacy protection you have never thought about before. Somebody said leave it with me, and you had forty other things to do that week.
The same goes for the analytics, the stock photos and the account the contact form sends through. Each one was one less thing at a moment when one less thing really mattered.
The bill for that arrangement does not arrive for years, and when it does it looks like a website problem rather than an admin problem.
Owning It and Editing It Are Different Things
Worth saying early, because this is where most of the confusion sits.
Plenty of businesses are better off never touching their own website. They pay somebody to make the changes, and that is a sensible trade, the same way most people pay somebody to service the boiler rather than learning to do it themselves.
Not being able to edit your site is not the problem. Not owning it is. You can hand somebody the keys and still keep the deeds.
The six things below are about the deeds.
The Six Things Worth Knowing
You can check all of this in an afternoon, for nothing, without telling anyone you are doing it.
1. The domain. Whose name is it registered in, which account, and whose card renews it. You want your business name, an account you can log into yourself, and your own payment details on file. Somebody else can be given access to manage it for you. The account should still be yours. A public WHOIS lookup will tell you the registrar in about ten seconds, even if privacy protection hides the contact details.
2. The DNS. Where the records are managed, which is not always the same place the domain is registered. This one matters more than people expect, because DNS controls your email as well as your website. Plenty of businesses have found out that whoever holds the DNS can switch their email off without ever touching the website.
3. The hosting. Where the site actually lives, and what it costs. Somebody else hosting it is completely normal and often the right arrangement, because they are the one looking after it. The question is not whether you can log in and change things. It is whether the site could be moved somewhere else if you asked, without anybody needing to agree to that except you.
4. Whether you can leave, and what comes with you. Ask the question now rather than on the day. Can you have the files? If it is a platform, can the content be exported in a form anybody else could use? Some setups hand you everything. Others hand you a PDF of your own words. The difference only matters once, and by then it is too late to have asked.
5. The content. Photographs are the usual one. Somebody licensed those images, possibly for a fixed term, possibly for one website only, and the licence has your builder's name on it rather than yours. Worth knowing which photos on your site you could still use if you moved, and which you could not.
6. The measurement. Analytics and Search Console should belong to your account, with whoever works on the site added as a user. It is very often the other way round, which means your entire history of traffic, enquiries and search performance lives in somebody else's login. Years of data, and no way to take it with you.
What a Good Handover Looks Like
One document. One page is usually enough.
It lists every account involved in your website, the email address each one is registered to, who currently has access, and what each one is for. It says where a copy of the site itself is kept. Not the passwords, which should live in a password manager. Just the map.
That document should exist at the end of any website project, and you should not have to ask for it twice. Anyone doing this properly already has the information written down somewhere, because they needed it to do the job.
If you are commissioning a site right now, ask for it before you start rather than at the end. The answer tells you a lot, and it takes about four lines to give. Anyone who bristles at the question has answered it.
What to Do if the Answers Are Not What You Hoped
Almost certainly nothing dramatic.
Send one email. Say you are tidying up your business admin and you would like the domain and the analytics in your own accounts, and a copy of the site for your records, and ask what they need from you to do it. Do not accuse anybody of anything, because nearly always there is nothing to accuse them of. It was easier at the time, for both of you.
Most people will sort it out that week and think nothing of it. Some will do it and charge an hour, which is fair enough.
And occasionally somebody will not want to, or will go quiet, or will explain why it is better kept as it is. That is worth paying attention to, because you asked a simple question about something you paid for and did not get a simple answer. You now know something about the relationship that you did not know last week, and you found it out on a quiet Tuesday rather than on the morning the site went down.
The Bit That Actually Matters
This is not really about websites. A website is just where it shows up, because a website has more moving parts, more accounts and more people involved than most things a small business buys.
The principle is the same one you already apply everywhere else. The lease is in your name. So is the bank account.
Your address on the internet should be too.
Access is not ownership. Access is something somebody gives you, and anything somebody gives you, they can stop giving you.