Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Client accounts can be one of the trickiest parts of a marketing agency relationship. You might have ad accounts, analytics dashboards, social media pages, pixels, creative folders, reporting tools and login access all tangled together.
If you're the agency, you want enough control to do the job properly and protect your systems. If you're the client, you don't want to feel locked out of your own marketing assets if the relationship ends.
The good news is that this doesn't have to become a messy dispute. With clear contract wording in your marketing agency agreement and sensible access processes, you can decide who controls what from day one.
Who Owns Client Accounts In A Marketing Agency?
It depends on what the account is, who created it, whose brand it represents, what the platform terms say and what your contract says.
There isn't one UK law that says every Google Ads account, Meta Business Manager, TikTok Ads account or social media page automatically belongs to either the agency or the client. In practice, account ownership is usually worked out from a mix of:
- Platform control: which business account, email address or organisation profile created and controls the account.
- Contract wording: what the agency agreement or marketing agency master services agreement says about ownership, admin access, billing, data and handover.
- Intellectual property rights: who owns the content, copy, designs, videos, reports, strategy documents and templates.
- Data protection rules: who controls personal data and what must happen to it under the UK GDPR and Data Protection Act 2018.
- Payment and billing history: whose card, invoices and spend records are attached to the account.
For example, say Bright Pixel Agency sets up a Meta ad account for a gym client, using Bright Pixel's own Business Manager and the agency's payment method. The gym later wants to leave and take the ad account history with it. If the contract doesn't deal with account handover, both sides may have a genuine argument. Bright Pixel may say it created and manages the account. The gym may say the account was built for its brand, audience and ad spend.
That's exactly the type of dispute you can avoid with a clear account ownership clause.
Who Owns The Ad Accounts, Analytics And Pixels?
The safest position is usually for the client to own the core ad accounts, analytics properties and tracking assets, with the agency given admin access to manage them.
For most client-agency relationships, the key marketing infrastructure should sit with the client's business. That often includes:
- Google Ads accounts
- Google Analytics 4 properties
- Google Tag Manager containers
- Meta Business Manager assets, including ad accounts and pixels
- TikTok, Pinterest, LinkedIn or X advertising accounts
- Website tracking pixels and conversion events
- Email marketing accounts and CRM integrations
This setup gives the client continuity. If the agency relationship ends, the client keeps their campaign history, conversion data, audiences, tracking setup and billing records.
For the agency, this setup also keeps things cleaner. You can still have the access you need, but you're less likely to be accused of holding the client's account hostage later.
When Agency-Owned Accounts Can Make Sense
There are some situations where an agency-owned account may be commercially sensible. For example, you may use a master reporting dashboard, software subscription, design library or internal campaign management tool across multiple clients.
If you do this, your contract should separate:
- Client assets: accounts, data and content that belong to the client.
- Agency tools: systems, templates, methods, dashboards and know-how that belong to the agency.
- Deliverables: the specific campaigns, reports or content you create for the client.
That distinction matters. A client may be entitled to their exported campaign data, but not to your internal workflow templates, pricing models or proprietary reporting framework unless you agreed to provide them.
Who Owns Social Media Accounts In The UK?
Social media account ownership in the UK depends on the platform setup, branding, access details and contract terms.
A business social media account can feel like a simple asset, but legally it may involve several layers:
- the platform's own terms of service
- the email address or business profile used to register the account
- the username and brand name
- copyright in the posts, images, videos and captions
- personal data in followers, messages, comments and analytics
- trade mark rights if the account uses a registered or unregistered brand
If the account is branded with the client's business name, promotes the client's products and uses the client's customer relationships, the commercial expectation is often that it should sit with the client. But if the agency created it under its own login and there's no agreement, recovering access can be painful.
The cleanest approach is to write down, before work starts, which party owns or controls each account. For example:
- The client owns all brand social media accounts.
- The agency receives role-based admin access only.
- The agency must not change the handle, recovery email or two-factor authentication details without approval.
- The client must not remove agency access while unpaid approved work is still being completed, except where there's a serious issue.
- On termination, the agency must remove its users and return any access credentials it holds.
Try to avoid shared passwords wherever possible. Platform role permissions, password managers and two-factor authentication are much safer than passing logins around by email.
Who Owns Client Data And Campaign Performance Data?
The client usually owns or controls its customer data, while campaign performance data should be dealt with clearly in the contract.
Under the UK GDPR and Data Protection Act 2018, you need to look at whether each party is a controller, processor or sometimes a joint controller for the personal data involved.
In many agency relationships:
- the client is the controller of customer, lead and audience data because it decides why that data is used
- the agency is the processor because it uses that data to run campaigns for the client
- the agency may be an independent controller for its own business admin data, such as its contacts at the client
If the agency processes personal data for the client, Article 28 of the UK GDPR requires a written data processing agreement. This can sit inside the main marketing agency services agreement or in a separate data processing addendum.
That document should cover things like:
- what personal data is being processed
- what the agency can and can't do with the data
- security measures
- use of subcontractors and overseas tools
- help with data subject requests
- what happens to the data when the services end
- whether data must be returned, deleted or anonymised
Campaign performance data is slightly different. Click-through rates, cost per lead, conversion rates, search term reports and audience insights may not always be personal data, but they can still be commercially valuable.
Your contract should say whether the client can export and keep:
- historical campaign data
- audience and conversion data
- keyword lists and negative keyword lists
- creative performance reports
- lead source data
- analytics reports and dashboards
If the agency wants to use anonymised learnings across its business, say so. For example, you might allow the agency to use aggregated, non-identifying campaign insights to improve its services, but not disclose the client's confidential information or personal data.
What Should Your Contract Say About Admin Access?
Your contract should say exactly who has admin access, what they can do with it and what happens if access needs to change.
Admin access is about control, not just convenience. Someone with full admin rights may be able to remove users, change billing details, delete campaigns, export data, connect third-party tools or shut down tracking.
A good agency agreement should cover:
- Account setup: who creates each account and whose business details will be used.
- Access levels: who gets owner, admin, editor, analyst or viewer permissions.
- Billing: whose payment method is used and how media spend is approved.
- Security: password manager use, two-factor authentication and restrictions on shared logins.
- Approvals: when the agency can make changes without separate approval.
- Subcontractors: whether freelancers or white-label providers can access accounts.
- Suspension: what happens if invoices are unpaid or the client breaches the agreement.
- Emergency access: what happens if an account is hacked, suspended or locked.
For unpaid invoices, be careful. An agency can often pause services if the contract allows it, but locking a client out of its own accounts or refusing to return personal data can create bigger problems than the unpaid bill. If you want a right to suspend work or withhold certain deliverables, the wording needs to be fair, clear and proportionate.
Templates often miss these practical details. The more your digital marketing agency agreement reflects how you actually work, the easier it's to rely on if something goes wrong.
What Happens When The Agency Relationship Ends?
When the relationship ends, the contract should give both sides a clear handover process for accounts, data, content and access.
This is where many disputes happen. The campaign is still live, the agency is waiting on final payment, the client needs access urgently and nobody can find the recovery codes.
A good termination and handover clause should deal with the practical steps, not just say that the agreement ends.
What The Handover Should Include
Your handover process might cover:
- a list of all accounts, tools and platforms used for the client
- confirmation of who owns or controls each account
- transfer of owner or admin access where needed
- removal of agency staff and subcontractor access
- export of campaign reports, analytics data and agreed files
- return or deletion of personal data, depending on the data processing terms
- handover of approved creative assets and final deliverables
- confirmation of outstanding media spend, platform invoices and agency fees
- a date when access will be removed or reduced
You should also set a specific timeframe. There isn't a general UK statutory handover period for marketing accounts, so this is a commercial point for your contract. Many businesses choose a period such as 5 or 10 business days after termination, but the right timing depends on the platforms, the volume of work and whether a transition period is needed.
What Happens To Creative Files?
Creative ownership needs separate wording. Under the Copyright, Designs and Patents Act 1988, the person or business that creates original copyright material will usually own the copyright unless there's a valid assignment in writing.
That means an agency may own copyright in copy, designs, videos, photographs, reports, landing page layouts or strategy documents it creates, unless the contract says those rights transfer to the client.
Your agreement should say whether the client gets:
- a full assignment of IP rights after payment
- a licence to use the deliverables for certain purposes
- ownership of final approved files only
- access to editable source files, such as design files or project files
- no rights in agency templates, unused concepts or internal know-how
If the client expects to keep using the ads, videos and landing page copy after the agency leaves, the contract should say that clearly. If the agency wants to keep source files or reusable templates, that should be clear too.
Common Mistakes To Avoid
A few small decisions at the start of the relationship can prevent a lot of frustration later.
The most common mistakes we see include:
- Setting up everything under the agency's email: this can make transfer difficult if the client changes agencies.
- Using one shared login: this creates security issues and makes it hard to track who changed what.
- Not separating media spend from agency fees: both sides should know what is paid to the platform and what is paid to the agency.
- Leaving IP ownership vague: final deliverables, source files and templates shouldn't be treated as the same thing.
- Ignoring data protection: customer lists, leads, remarketing audiences and messages can involve personal data under UK data protection law.
- No offboarding plan: account transfers, data exports and user removals shouldn't be worked out in a rush on the last day.
- Relying on platform assumptions: Meta, Google, TikTok and other platforms all have their own access rules, and those rules may not match what you think your commercial deal says.
If you're a client, ask for account ownership, access settings and data processing terms before campaigns go live. If you're an agency, explain your setup clearly and put it in writing. That transparency helps build trust and makes your relationship feel more professional.
You don't need to overcomplicate this. A short account schedule can work well. List each platform, who owns it, who pays for it, who has admin access and what happens when the agreement ends.
Key Takeaways
- There's no single default rule for who owns marketing agency client accounts. Your platform setup and contract wording do most of the work.
- Clients usually benefit from owning core ad accounts, analytics properties, pixels and social media accounts, with agencies given role-based access.
- Agencies can protect their own tools, templates, know-how and source files if the agreement draws a clear line between client assets and agency assets.
- Client data needs careful handling under the UK GDPR and Data Protection Act 2018, especially when the agency processes customer or lead data.
- Your agreement should cover admin access, billing, data export, IP ownership and post-termination handover before work starts.
- A clear offboarding process helps avoid lock-in disputes and keeps campaigns, data and relationships in better shape.
If you'd like help with your agency agreements, ad account handover clauses, data processing terms and IP ownership wording, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.
Get your customer-facing terms right
What should your privacy and online terms cover?
If you collect customer data, sell online or run marketing campaigns, your public terms and privacy documents should match the real customer journey.








