Your Last Agency Held Your Website Hostage. Here's How to Make Sure the Next One Can't.

The worst phone calls I get at my agency aren't from people whose SEO failed. They're from people who fired their agency and then discovered they don't own their own website.

Have you ever struggled to get access to your own website, domain, or Google account from an agency or developer?

• Yes, it was a nightmare
• No, I have full control
• Not sure who controls mine

One call I won't forget came from a coaching institute owner in West Delhi. He'd decided to switch agencies after two flat years. Simple enough, he thought. Then he found out his domain was registered in the agency's name, his website lived on the agency's hosting account, his Google Business Profile was owned by an email ID belonging to an employee who had since quit the agency, and he had never once logged into his own Google Analytics because he didn't have the password.

Ten years of his business's digital history, and he controlled none of it. The agency's exit offer was that he could "buy back" his own website for ₹75,000. That's not an agency. That's a landlord, and you built your shop on his land.

The maddening part is how preventable this is. It costs nothing to prevent. You just have to check five things, ideally before you sign, but honestly, check them today even if you're happy with your current agency. Especially if you're happy, because that's when nobody looks.

One: your domain name

This is the big one. Your domain is your address on the internet, and whoever controls the registrar account controls everything.

Go to a WHOIS lookup site right now and type in your domain. If the registrant organization shows your agency's name instead of yours, stop reading and deal with that first. Many agencies register domains for clients as a "convenience" during setup in the agency's own GoDaddy or similar account. Most aren't being malicious. But convenience during setup becomes leverage during breakup.

The fix: the domain must sit in a registrar account created with YOUR email, paid for by YOUR card, with the password in YOUR possession. The agency can be added as a technical contact or given delegated access. There is no legitimate reason, none, for an agency to own a client's domain.

Two: your hosting

Same principle, one layer down. Your website's files and database live on a hosting account somewhere. If that account belongs to the agency, your website exists at their pleasure.

Agencies love bundling "free hosting" into packages. It sounds generous. What it actually means is that the day you leave, your site can go dark, and even in friendlier breakups you're stuck begging for a backup of your own website, which arrives late, incomplete, or as a zip file nobody on your side knows what to do with.

Buy your own hosting. Hostinger, DigitalOcean, or whoever suits your size; a basic plan costs a few hundred rupees a month. Give the agency access to work on it. When you part ways, you change one password, and everything you paid to build is still yours. Also, insist on receiving a full backup every quarter regardless. Backups have a way of not existing right when relationships sour.

Three: your Google Business Profile

For a local business in Delhi, this one might matter more than the website itself. Your GBP is your map listing, your reviews, and your years of photos and posts. And Google's ownership system makes hostage situations here especially ugly because a profile can only have one primary owner.

Here's what happens constantly: an agency creates or claims the profile using their own email.

Years pass, reviews accumulate. Then you split, and you discover the primary owner of your business on Google Maps is an email ID you've never heard of. Recovering ownership through Google's process is possible but slow and painful, and meanwhile someone who no longer works for you can edit your business hours.

The check takes one minute. Open business.google.com, find your profile, and look at the Users list. Your own email must be the primary owner. The agency gets manager access. Manager access lets them do everything they legitimately need: posts, photos, replies, updates. The only thing it doesn't let them do is lock you out. Which is precisely the point.

Do you know if you actually own these for your business?

• My domain
• My website/hosting
• My Google Business Profile
• Honestly... not sure about any

Four: your Analytics and Search Console

Google Analytics and Search Console hold your traffic history. Not the agency's history. Yours. Which pages bring you customers, which keywords you rank for, how your seasons look year over year. When an agency sets these up under their own account and you leave, that history usually leaves with them, and your next agency starts blind.

There's also a subtler problem. If you can't open Search Console yourself, you can never independently verify a single claim in your monthly report. Every number you see has passed through the hands of the people being evaluated by it. I tell every client who signs with us to open their own Search Console at least once a month, not because I expect them to analyse it, but because a client who can see the raw numbers keeps everyone honest, including me.

The fix follows the same pattern as everything else. Properties created under your Google account. Agency added as a user. Two minutes of setup that saves you years of data.

Five: your ad accounts and your content

If you run Google or Meta ads, the ad account should be yours, with the agency operating through Business Manager or manager-account access. Otherwise your entire campaign history, audiences, and pixel data walk away when they do, and your next campaigns start from zero and cost more because of it.

And a clause almost nobody thinks about until it hurts: put in writing that all content created for you, meaning website copy, blog posts, photos, creatives, belongs to you on payment. Some agency contracts quietly retain ownership of "work product." That's how a business ends up legally unable to reuse its own About page.

The conversation that tells you everything

Here's the beautiful part of all this. You don't need to be technical to protect yourself. You just need to have one conversation before signing.

Say this: "Everything will be in accounts I own. Domain, hosting, Google Business Profile, Analytics, Search Console, ad accounts. You'll have full access to work. If we ever part ways, I revoke access and keep everything. Agreed?"

A good agency agrees instantly, because this is already how they work. At mine, this setup is standard from day one, not out of saintliness but because I never want a client staying with us out of captivity. Clients should stay because the work is good. That's the whole business model.

Any agency that resists, that talks about "our streamlined system" or "it's easier if we manage it centrally," has just told you what the exit will look like. Believe them, and keep looking.

The institute owner from the beginning of this piece eventually got most of it back, after weeks of emails and an amount of stress no business owner should spend on their own property. When we rebuilt his setup, the first thing we did wasn't SEO. It was making sure that whatever happens between him and us in the future, everything stays his.

That should be the industry standard. Until it is, check those five accounts. Today, ideally. It's your shop. Make sure it's on your land.