Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Before You Buy A Domain: A Due Diligence Checklist For Small Businesses
- 1. Check If The Domain Conflicts With Trade Marks Or Brand Rights
- 2. Confirm Who Actually Controls The Domain
- 3. Look For Baggage: Past Use, Reputation And Blacklisting Risks
- 4. Make Sure The Domain Is Registered Under The Right Entity
- 5. Check Australia-Specific .au Rules (Including Eligibility And Dispute Options)
- Key Takeaways
Buying the right domain name can feel like a “small” step in your startup journey - until you realise your domain is often the front door to your brand.
It’s where customers find you, where sales happen, where marketing campaigns point, and where trust is built (or lost). If you purchase a domain name without thinking about the legal side, you can end up with expensive disputes, rebranding headaches, or even losing the domain later.
This guide walks you through buying a domain in Australia with a practical legal lens. We’ll cover what to check before you buy, how to structure the purchase if you’re acquiring an existing domain from someone else, and the key legal documents that help protect your business as you grow.
Why Buying A Domain Name Is A Legal Issue (Not Just A Tech Task)
At a basic level, buying a domain means you’re registering (or acquiring) the right to use a domain name (like yourbusiness.com.au) through a domain registrar, subject to the relevant registry rules.
But for small businesses, the legal risks usually come from one of these scenarios:
- You buy a domain from a third party (private sale), not just a normal registration.
- You buy an existing business and the domain comes as part of the deal.
- You register a domain that clashes with someone else’s brand (trade marks and passing off risks).
- You set up the domain under the wrong “owner” (for example, a developer or former co-founder registers it in their own name).
When you buy a domain, you’re dealing with an asset that can be commercially valuable. So it’s worth treating it like one.
Also, your domain name interacts with other rights, including your trade mark, business name, company name, brand reputation, and consumer-facing promises.
Domain Registration vs Domain Ownership (In Practical Terms)
Domains are typically controlled through registrar accounts and registry rules - which is why “ownership” can be a little different from owning physical property.
From a business risk perspective, what matters is:
- Who is the legal registrant (the name/entity recorded as the holder).
- Who controls access to the registrar account, DNS settings, and renewals.
- What agreement exists (if any) between you and the person/entity you’re buying from.
In other words: it’s not enough that someone “said” they sold it to you. You want clear documentation and practical control.
Before You Buy A Domain: A Due Diligence Checklist For Small Businesses
If you’re registering a brand-new domain that’s available, your checks are mostly around brand conflict and internal ownership.
If you’re buying an existing domain from another person or business, your checks should be deeper. Here’s a practical checklist to reduce the risk of nasty surprises.
1. Check If The Domain Conflicts With Trade Marks Or Brand Rights
A domain name can trigger trade mark disputes if it’s identical or confusingly similar to an existing brand in the same (or closely related) market.
Even if you’ve already built branding around the name, it’s still worth checking:
- Does another business use the same or a very similar name in Australia?
- Is there an existing registered trade mark?
- Could customers reasonably think your business is connected to someone else?
This is one of the biggest “hidden” legal risks when you buy a domain. A domain can look available and still be risky from an IP perspective.
If you’re serious about building a brand, it’s usually worth aligning your domain strategy with your trade mark strategy early, not later. That might also affect whether you register a business name (and what you choose). For example, if you’re operating under a trading name, business name registration may be part of your launch checklist.
2. Confirm Who Actually Controls The Domain
When you’re buying a domain from a seller, don’t rely on screenshots or promises. You want to confirm the domain is actually under their control and transferable.
Practical things to check include:
- Is the seller the registrant (or authorised to sell on behalf of the registrant)?
- Is the domain locked (and can it be unlocked for transfer)?
- Is there any dispute or hold on the domain at the registry/registrar level?
- Is the domain close to expiry (and who is responsible for renewal during the sale)?
If someone is selling “on behalf of” a company (or a family member, or a previous business partner), consider documenting that authority properly - it helps avoid issues later about whether the seller had the right to sell.
3. Look For Baggage: Past Use, Reputation And Blacklisting Risks
A domain has a history. If it has been used for spam, misleading advertising, or questionable content, it can affect your marketing, email deliverability, and brand reputation.
From a legal and commercial perspective, consider checking:
- What the domain was previously used for (including old websites).
- Whether it has been associated with complaints or misleading conduct.
- Whether the seller has outstanding disputes connected to the domain or brand.
This isn’t just a “marketing” issue. If you inherit customer confusion or complaints, it can create real consumer law exposure.
4. Make Sure The Domain Is Registered Under The Right Entity
A common startup mistake is registering domains informally - under a founder’s personal name, a contractor’s name, or a “temporary” entity that you later stop using.
As soon as it makes sense for your business, align the domain with your operating structure (e.g. your company). If you’re setting up a company, doing your company set up early can avoid messy transfers later (especially when you bring on investors or sell the business).
If you have co-founders, think about what happens if someone leaves. A domain can become a leverage point in disputes if ownership and control aren’t clear.
5. Check Australia-Specific .au Rules (Including Eligibility And Dispute Options)
If you’re looking at a .com.au, .net.au or .au domain, you’ll also need to consider Australia’s .au rules (administered by auDA). In practice, that means checking eligibility and allocation requirements before you register or acquire a domain - and understanding that there are specific dispute processes for .au domains.
Depending on the extension, you may need an Australian presence (such as an ABN/ACN) and the domain may need to be closely connected to your business name, company name, trade mark, or the goods and services you provide.
If there’s a conflict later (for example, someone claims the domain is misleading or was registered in bad faith), .au domains can be challenged through established dispute pathways, so it’s worth reducing those risks upfront.
How To Buy A Domain From Someone Else (And Document It Properly)
Buying an existing domain is more like buying an asset than clicking “register” online.
It’s very common for domain sales to happen informally - a few emails, a PayID transfer, and a “trust me” handover. That’s when things go wrong.
To reduce risk, you want two things:
- A clear agreement about what’s being sold and on what terms.
- A clean handover of control (registrar transfer, credentials, and related assets).
Key Deal Terms To Include In A Domain Sale
Even if the price is modest, it helps to document the sale terms clearly. Depending on the situation, a short written agreement may cover:
- Parties: Who is selling and who is buying (including ABN/ACN details where relevant).
- What’s included: The domain name itself, and whether related assets are included (website files, email accounts, content, logos, social media handles).
- Price and payment: Amount, timing, deposit (if any), and what happens if transfer fails.
- Transfer process: Timeframes, responsibilities, and what “completion” looks like.
- Warranties: Seller confirms they have the right to sell, the domain isn’t subject to security interests/disputes, and they’re not knowingly infringing third-party IP.
- Restraints / non-use: If needed, the seller agrees not to register confusingly similar domains or imitate your branding.
If the domain is a valuable brand asset (or the sale is part of a broader transaction), you may also need to deal with intellectual property ownership. For example, if the domain corresponds to a brand name/logo, you might document an IP assignment so you clearly own what you think you’re buying.
Practical Tip: Use An Escrow-Like Process (Even Informally)
For higher-value domain purchases, you don’t want to pay and hope the seller transfers later.
A safer approach is to structure the transaction so that:
- transfer steps begin first (or at least are verified as possible), and
- payment is released once transfer is confirmed.
This can be done through agreed milestones, or using a trusted intermediary - the main point is to avoid a situation where one side has everything and the other side has nothing.
Who Should Own The Domain In Your Startup (And What If You Have Co-Founders)?
As your business grows, the domain becomes part of your core IP and brand assets. So you want ownership to match how the business is run.
If You’re A Solo Founder
If you’re running the business as a company, it often makes sense for the company to be the registrant (not you personally).
If you’re operating as a sole trader, you may hold it personally - but you should still take steps to keep control secure (and keep registrar access details documented and protected).
If You Have Co-Founders
This is where things often get messy.
If one co-founder registers the domain personally and later leaves, the business might lose access or be forced into a dispute to recover it. Even if everyone has good intentions at the start, relationships change under pressure.
If you have multiple founders, it’s worth setting out expectations around key assets (including domains) in a Shareholders Agreement. That way, if someone exits, there’s a clear path for transferring and retaining essential business assets.
If A Developer Or Agency Registered The Domain
It’s very common for a web developer to “take care of everything” and register the domain for you. That’s not necessarily a problem - as long as the domain is registered in your business name (or transferred immediately) and you control the account.
At minimum, you should ensure:
- the registrant details show your business (or your company), and
- you have admin access to the registrar account and DNS management.
If a third party needs to use the domain temporarily (for example, they’re hosting or operating a landing page while you build a new platform), you can document the arrangement in writing (for example, as part of your development agreement) so control, security and responsibilities are clear.
After You Buy A Domain: The Legal Must-Haves For Your Website And Online Brand
Once you buy a domain, most businesses move quickly to build a website, set up email, and start marketing. That’s exciting - but it’s also where compliance issues can pop up quickly.
Here are the big legal areas to consider early.
Website Terms And Customer Terms
If your domain hosts a website that customers use (even just to request a quote), you should consider having website terms that set expectations around use, limitations, and liability.
If you sell online, your customer terms become even more important - they’re where you explain ordering, payment, delivery, cancellations, and dispute handling.
Many businesses put this in place through Website Terms and Conditions tailored to how the site actually works.
Privacy Compliance (Especially If You Collect Leads Or Run Analytics)
If your website collects personal information - even something as simple as names and email addresses in a contact form - you should think about privacy compliance.
A clear Privacy Policy helps explain:
- what information you collect and why
- how you store and use it
- who you share it with (for example, hosting providers or email tools)
- how customers can contact you about their data
Privacy is also a trust issue. Customers are much more likely to buy from a business that looks legitimate and transparent online.
Australian Consumer Law (ACL) And Your Online Claims
Your domain and website are usually where your marketing claims live - “best”, “fastest”, “guaranteed results”, “free trial”, “no risk”, and so on.
Under the Australian Consumer Law (ACL), you need to be careful that advertising and representations aren’t misleading or deceptive. That includes:
- pricing claims
- “limited time” offers
- refund and returns statements
- what your product or service can do
A practical tip: make sure your website terms, refund processes, and marketing copy all match. Inconsistency is where disputes and complaints often begin.
Email, Security And Access Controls
This isn’t strictly “legal drafting”, but it is a major risk area after you buy a domain.
Make sure you:
- use secure passwords and multi-factor authentication on registrar and email accounts
- limit admin access (particularly for contractors)
- keep a register of who has access, and remove access when someone leaves
Domain hijacking and email compromise can cause customer harm and reputational damage fast - and recovering from it can be costly.
Key Takeaways
- When you buy a domain, treat it like a business asset - not just a tech purchase - because it can create real IP, brand, and contractual risks.
- Before buying, check trade mark conflicts, confirm the seller has the right to sell, look into the domain’s history and reputation, and consider any .au eligibility and allocation rules that apply.
- If you’re buying a domain from someone else, document the key deal terms clearly and make sure the transfer process gives you real control (not just a promise).
- Make sure the domain is registered under the right entity (often your company), especially if you have co-founders, investors, or plans to sell the business later.
- After you buy a domain, think about website legal compliance early - including customer terms, privacy, and Australian Consumer Law risks.
This article is general information only and does not constitute legal advice.
If you’d like legal help buying a domain or setting up your brand and website the right way, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








