Who Owns Your Domain Name? How to Check You Are the Registrant, Not Your Web Designer

Most business owners assume the domain is theirs because they asked for it, paid for it or see it on their invoice. In practice a domain belongs to whoever is recorded as its registrant, and that is not always the person who thinks they own it. When a web designer, an agency or a staff member registers a domain "to get things started", their own name and email can end up on the record. Nothing seems wrong for years, until the relationship ends, the renewal email goes to a stranger or the account cannot be accessed. This guide is about one specific check: looking at the domain itself to confirm you are the registrant, reading what you find, and fixing it if you are not. For the wider question of who controls your site, hosting and design files, see who actually owns your website.

Registrant, account holder and contacts: who is who

Four different roles can be attached to a single domain, and people often mix them up:

• Registrant: the legal holder of the domain. This is the name the domain is registered to, and it is the role that matters for ownership.
• Registrar account holder: whoever owns the login at the registrar where the domain is managed. The account controls day-to-day settings, renewals and transfer requests.
• Administrative and technical contacts: people or companies listed as the contact for decisions and for technical changes. Many registrars fill these in with the same details as the registrant, but they can be different.
• The payer: whoever's card or invoice covers the renewal. Paying does not make you the registrant.

The risky situation is when these roles are held by different parties. A designer who registered the domain through their own account may be the account holder, the contact and the registrant all at once, while the client is only the payer.

Why the registrant matters

The registrant is the party a registrar generally treats as the holder when something needs to be decided: renewing, changing the details, releasing a transfer code or closing the account. If someone else is the registrant, they can in practice decide what happens to your domain, and your website and email depend on it. The consequences are practical rather than dramatic:

• Renewal notices go to them. If the domain lapses because a reminder reached an old inbox, your site and email stop, and getting the name back can cost more. See what happens when a domain expires.
• You may not be able to move it. A transfer to another registrar normally has to be authorised from the account that holds the domain, so a cooperative handover depends on the current holder.
• Disputes get harder. If a relationship ends badly, proving the business is the rightful owner is much easier when its own name is already on the record.
• Staff turnover can strand it. A domain in an ex-employee's name or on their personal email is a risk even when everyone parted on good terms.

This is general guidance, not legal advice. If there is already a dispute about a domain, get proper advice rather than relying on a blog post.

Two ways to check who the registrant is

You can check without asking anyone's permission, and the two methods complement each other.

Method 1: your registrar account. If you have your own login to the account where the domain is managed, open the domain's details or contact settings. You should see the registrant name, organisation, email and phone number, and usually the administrative and technical contacts too. This is the most reliable view because it shows what the registrar actually holds. If you do not know whether you have an account, search your inboxes for emails from registrars about renewals, receipts or verification links, since those usually reveal where the domain is managed.

Method 2: a public domain lookup. Public lookup tools, often called WHOIS or registration data lookup tools, let anyone enter a domain name and see the public record. Many registries and registrars offer one. Type your domain in and look at the registrant name, organisation and email, plus the registrar, creation date and expiry date. What is shown varies by extension and registrar, and some details may be hidden or replaced, so treat a lookup as a quick outside view rather than the full record. If the public view is not clear, check with your registrar.

Whichever you use, write down what you find: registrant name, registrant email, registrar name and expiry date. That note is useful later if you need to ask for a change.

How to read what you find

A lookup result can look cryptic the first time. This table translates the most common outcomes into plain language and a next step.

Privacy protection can hide the answer

Privacy protection is a service that replaces the personal contact details in the public view with the service's own. It is a good thing for most owners because it keeps your phone number and email out of public lookups and the inboxes of cold sellers. But it means a lookup may not show who the registrant is, and an agency's privacy-protected domain can look no different from yours. The real details sit in the registrar's records. This is why the account view is the dependable check: privacy hides the details from the public, not from the account holder. If you are unsure what your registrar's privacy service shows or hides, check with your registrar.

If the registrant is your designer or agency

This is common and usually fixable without conflict. Many designers register domains for clients as a convenience and have no wish to keep them. The cleanest outcome is that the domain is registered in your business name, with an email you control, in an account you can log in to. Practical ways to get there:

• Ask for a registrant change. Some registrars let the account holder update the registrant details or move the domain between accounts. Ask your designer whether theirs does.
• Ask them to transfer it to you. The designer unlocks the domain and gives you the authorisation code, and you start a transfer to the registrar account you control. See the step-by-step guide to transferring a domain.
• Ask for access first. If neither is possible yet, ask to be added as a contact or for a login so you can at least see renewals and settings.

Be specific about what you want in writing: the domain name, that you want it registered to your business name, an email address you control, and by when. A polite written request leaves a clear record.

A simple message you can send

Keep it short and non-accusatory. Something like: "Hi, we are tidying up our records. Could you confirm which registrar holds our domain, who is listed as the registrant, and the expiry date? We would like the domain registered in our company name with our own account, so please let us know how you would like to handle the transfer or registrant change." That wording assumes goodwill, which is almost always the case, and gets you facts to work with.

Taking control: a safe order of steps

• 1. Find out first. Run the check above and record the registrant, email, registrar and expiry date.
• 2. Make sure it does not lapse. If expiry is close, agree who renews it, so the transfer is not rushed. Our guide to never missing a domain renewal lists the settings to check.
• 3. Ask in writing. Request the registrant change or the transfer, as described above.
• 4. Move it into an account you control. Check that the domain lock is on once it arrives; domain lock explained covers why.
• 5. Fix the details. Put your business name and a monitored shared email, not one person's inbox, on the record.
• 6. Set renewals. Turn on auto-renew, check the card and diarise the expiry date. Consider a longer term for your main name; see 1-year vs multi-year registration.

Transfers have conditions, such as the domain being unlocked and an authorisation code being supplied, and rules differ by extension and registrar. Do not assume a particular timeline or that a transfer is instant; check with your registrar.

Common mistakes

• Assuming that paying makes you the owner. The registrant on the record decides ownership, not who paid.
• Using one person's email. If that person leaves, so do the renewal notices. Use a role-based address that more than one person can read.
• Letting a supplier "look after" the domain with no copy of the details. Keep your own record of the registrar, registrant and expiry date.
• Trusting a public lookup alone. With privacy on, it may show the registrar, not you. Confirm in the account.
• Waiting for a dispute. Fixing the registrant while everyone is friendly is far easier than doing it afterwards.
• Transferring in a hurry before expiry. A domain very close to expiry is a bad time to experiment. Renew first if needed.

Where Gotka Technologies fits

Domain registration with Gotka Technologies starts from RM10/year and includes free transfer-in, domain lock and privacy protection. If your domain currently sits in a supplier's account, you can transfer it in to an account you control, and new domains can be registered in your business name from the start. If you are planning a new website, whoever builds it, whether through our web design service or another supplier, should register the domain in your name or place it in an account you control. Whichever route you take, ask for the registrant details in writing.

Key terms used in this guide

• Registrant: the person or company recorded as the holder of the domain. This, not who paid, determines ownership.
• Registrar: the company you register and manage the domain through, which deals with the registry for you.
• Administrative and technical contact: the contacts listed for decisions and technical changes; often the same as the registrant, but not always.
• WHOIS or registration data lookup: a public tool for viewing a domain's registration record, with what is shown varying by extension and registrar.
• Privacy protection: a service that replaces your personal contact details in the public record with the service's details.
• Authorisation code: a code from the current registrar needed to approve a transfer to another registrar.
• Domain lock: a registrar-level setting that blocks transfers until the account holder switches it off.