- Domain names and social accounts are registered to a specific account holder, tied to specific login credentials.
- - List digital assets by name in the disclosure schedule or asset list — exact domain names, exact social handles, the hosting account, business email addresses, and any customer or…
A business's online presence — its domain name, website, social media accounts, and customer contact lists — is often worth as much to a buyer as its physical equipment. These are also some of the easiest assets to overlook in a purchase agreement, and some of the easiest to lose control of after closing if the handover isn't handled deliberately.
This article covers what makes transferring domain names and social media accounts different from transferring physical assets, and the practical steps that actually get a buyer into the driver's seat.
Why Digital Assets Need Their Own Attention
Domain names and social accounts are registered to a specific account holder, tied to specific login credentials. Registrars and platforms don't know a business sale happened unless someone actually goes in and updates the registration or account ownership. In an asset sale, general language transferring "the business" or "its goodwill" may not clearly cover who ends up controlling a specific domain, a specific Instagram handle, or a specific Google Business Profile — these need to be identified precisely, not assumed.
Making Sure the Purchase Agreement Actually Covers This
- List digital assets by name in the disclosure schedule or asset list — exact domain names, exact social handles, the hosting account, business email addresses, and any customer or marketing lists.
- Get a representation from the seller confirming it actually owns and controls each listed asset, with no third-party disputes over a handle, listing, or domain.
- Include these assets within the general indemnity protections in the agreement, so an undisclosed ownership dispute (over a trademarked handle, for example) doesn't become the buyer's problem alone.
The Mechanics of the Handover
- Domain names. This usually means a registrar transfer — updating the registrant and administrative contact, and, if the buyer is moving to a different registrar, obtaining the transfer authorization code from the seller.
- Hosting and the website itself. Either the hosting account ownership is transferred directly, or the website content is migrated to hosting the buyer controls outright.
- Social media accounts. The safer approach is adding the buyer as an admin or owner first, confirming access works, and removing the seller's access afterward — rather than deleting and recreating an account with an established following.
- Email accounts and customer or marketing lists. Beyond updating credentials, using a customer list you didn't originally collect raises privacy considerations under PIPEDA that are worth flagging to a lawyer — don't assume a list transfers cleanly with the business without any privacy analysis.
- Review platforms and directory listings. Where the platform allows it, update the claimed ownership or business listing status so the buyer — not the seller — controls how the business responds to reviews going forward.
After Closing: Lock Down Access
- [ ] Change all passwords and two-factor authentication tied to devices, emails, or phone numbers the seller controls
- [ ] Confirm the registrant and billing contact details on every domain match the buyer
- [ ] Remove the seller and the seller's staff from admin access once any agreed transition support period ends
- [ ] Keep records of exactly what was transferred and when, in case a dispute comes up later
Frequently asked questions
What if the seller refuses to hand over a social media account after closing?
This is exactly why these accounts should be identified specifically in the purchase agreement, with representations about the seller's ownership and control. Without that groundwork, a buyer's recourse against a seller who drags its feet is much weaker than it needs to be.
Does buying the shares of a company mean the online accounts are automatically fine?
Generally, yes, in the sense that the corporation itself already controls its own accounts and nothing needs to legally transfer. That said, it's still worth confirming who personally holds the login credentials and two-factor authentication for key accounts, since founders sometimes keep these tied to personal devices even after a share sale.
Can a buyer keep using customer email lists collected by the seller?
This depends on the privacy basis under which that information was originally collected and how it will be used going forward — it isn't automatic just because the business itself was purchased. This is worth a specific conversation with a lawyer rather than an assumption either way.
Should domain transfer happen before or after closing?
Most buyers and sellers coordinate this to happen at or immediately after closing, sometimes with the seller retaining brief technical access to complete the handover smoothly. The purchase agreement should specify who's responsible for initiating the transfer and by when.
This is a business purchase or sale question
Start a file online — flat, published fees, reviewed by a licensed Ontario lawyer before a dollar is owed.