Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Do you really need a contract before paying a web developer a deposit? Yes - and it doesn't have to be complicated.
A website build can feel exciting, especially when you're finally turning your idea into something customers can see. But once you pay a deposit, you're relying on the developer to deliver the right site, on time, with the right access, ownership and handover at the end.
A clear website development agreement helps you avoid the awkward gaps: who owns the code, what counts as finished, who pays for delays, what happens after launch, and whether you can move your website later. Here's a practical website development agreement checklist you can use before you sign or pay.
Do You Need A Website Development Agreement Before Paying A Deposit?
Yes, you should have a written website development agreement before you pay a deposit or give a developer access to your systems.
Verbal promises and email threads can help show what you discussed, but they're rarely enough for a website project. A proper web developer agreement pulls the key commercial and legal points into one place, so everyone knows what they're delivering, when they're getting paid and what happens if things change.
For a startup or small business, the biggest risks usually aren't dramatic legal issues. They're practical problems like:
- the website isn't finished, but the developer says the final invoice is due
- you thought hosting was included, but it wasn't
- the developer keeps control of the domain name, source code or admin accounts
- the site uses third-party themes, plugins or images you don't have rights to use
- the website launches, but there's no maintenance, support or handover
Your contract should also name the parties properly. If you're contracting through a company, use the company name and ACN. If you're a sole trader, use your legal name and ABN. This matters because, if something goes wrong, you need to know exactly who promised to do what.
If you're using a template, treat it as a starting point only. Website projects vary a lot, and a lawyer should tailor the contract to your build, budget, IP position and risk level before you use it.
What Should Be In A Website Development Agreement Checklist?
Your checklist should cover the project scope, payments, acceptance process, IP ownership, hosting, maintenance, delays and handover obligations.
Think of the contract as the operating manual for the project. It should be specific enough that you can point to it when a question comes up, without needing to argue about what someone meant three weeks ago.
Fill-In Outline For Your Website Project Contract
- Parties: Write the correct legal names, ABNs, ACNs and contact details for your business and the developer.
- Project Scope: Describe exactly what the developer is building, including pages, features, integrations, forms, booking tools, checkout functions and admin dashboards.
- Deliverables: List what you'll receive, such as designs, staging site, live site, source code, documentation and login details.
- Timeline And Milestones: Set dates for each stage, who is responsible for approvals, and what happens if a milestone is missed.
- Fees And Payment Triggers: State the deposit, milestone payments, final payment and whether amounts include GST.
- Acceptance Testing: Explain how you'll test the site, how defects are reported, and when a stage is accepted.
- Change Requests: Set out how extra work is approved, priced and added to the timeline.
- IP Ownership And Licences: State who owns the website, code, designs, copy, images and any reusable developer tools.
- Hosting, Domains And Maintenance: Confirm who controls hosting, domain names, backups, updates and ongoing support.
- Handover And Exit: Require transfer of accounts, credentials, documentation and files when the project ends.
This outline isn't a finished legal document. It's a strong starting structure, but the wording needs to match your project and your commercial position.
How Should Milestones, Payments And Acceptance Testing Work?
Milestones should link payment to real progress, and acceptance testing should give you a clear way to check the work before you pay the next invoice.
A common mistake is paying too much too early. A deposit is normal, but if most of the fee is paid before you've tested anything, you have less leverage if the project slows down or the quality isn't there.
A better approach is to break the project into stages. For example:
- Deposit: paid when the contract is signed
- Design Approval: paid when wireframes and visual designs are accepted
- Development Milestone: paid when core features work on a staging site
- Launch Milestone: paid after the site passes acceptance testing and goes live
- Handover: paid once files, credentials and documentation are delivered
Say Priya runs a meal prep startup in Melbourne. Her website project costs $22,000 plus GST. Instead of paying 50% upfront, she agrees to pay a 25% deposit of $5,500 plus GST, 25% after design approval, 30% after the staging site passes core feature testing, and 20% after launch and handover.
Priya's contract gives her 7 business days to test each milestone. If the checkout doesn't process payments, that's a major defect and the milestone isn't accepted. If one product image needs resizing, that might be a minor defect that can be fixed without holding up the whole project.
Your contract should define this clearly. Helpful acceptance terms include:
- what devices and browsers the site must work on
- what functions are business-critical
- how you report defects
- how long the developer has to fix them
- whether silence after a review period counts as acceptance
There isn't one magic number for every project. A simple brochure site may need a shorter testing period than a marketplace, SaaS platform or eCommerce build.
Who Owns The Website IP And Source Code?
You won't automatically own all website IP just because you paid for the website, so your contract needs to deal with ownership clearly.
Under the Copyright Act 1968 (Cth), copyright generally starts with the person who creates the work, unless an exception applies or rights are assigned. In a website project, that can cover code, visual designs, copy, images, graphics and other creative material.
This is where website developer IP ownership clauses really matter. Your contract should say what your business owns, what the developer keeps, and what you're only licensed to use.
What You Usually Want To Own
- custom website designs created specifically for your business
- custom front-end and back-end code written for your project
- copy, images, logos and brand assets you provide
- configuration files and database structures needed to operate the site
- final deliverables once you've paid the agreed fees
What The Developer May Need To Keep
- pre-existing code libraries they used before your project
- general tools, methods and know-how
- licensed plugins, themes or frameworks
- open source components used under separate licence terms
The practical solution is often a mix of assignment and licence. For example, the developer assigns ownership of custom work to you once you pay, but keeps ownership of their pre-existing tools and gives you a licence to use them as part of the website.
Also check trade marks. Your brand name and logo can be protected through IP Australia if they're registered as trade marks. Your website development contract shouldn't transfer your brand IP to the developer, even temporarily.
Source code deserves its own clause. If you only receive access to a live website but not the source code or repository, moving to another developer later can be painful and expensive. Ask for repository access, build instructions and any credentials needed to maintain the site.
What Should Your Contract Say About Hosting, Maintenance And Security?
Your contract should say who manages hosting, who owns the accounts, what maintenance is included, and what security standards apply.
Hosting often gets treated as an afterthought, but it can cause real headaches. If the developer sets up the hosting account in their own name, you may not have control over your own website. The same goes for domain names, analytics accounts, email systems, payment gateway access and content management system logins.
Where possible, your business should own or control the key accounts. The developer can still be given admin access to do the work, but your business shouldn't be locked out.
Hosting And Account Control
- who registers and controls the domain name
- who owns the hosting account
- who pays hosting, plugin and subscription fees
- what happens if an account needs to be moved
- who has administrator access
- whether access is revoked at the end of the project
Maintenance And Support
Maintenance is different from development. Your contract should say whether post-launch support and maintenance services are included and, if so, for how long. For example, you might include 30 days of bug fixes after launch, with new features charged separately.
Be clear about the difference between:
- bugs: something doesn't work as agreed
- support: help using or updating the site
- maintenance: security updates, backups and plugin updates
- new work: extra features or changes outside the original scope
If the website collects personal information, privacy, security and website terms of use also matter. The Privacy Act 1988 (Cth) may apply to your business if you have annual turnover over $3 million, or if you fall into a covered category such as some health, credit reporting or contracted service provider activities. Even if the Act doesn't apply, customers still expect you to handle data carefully.
Your developer may also be collecting or accessing personal information while building the site. Your contract should require reasonable security measures, confidentiality, backups, secure credentials and prompt notice if something goes wrong.
What Happens If The Website Project Is Delayed Or Goes Off Scope?
Your contract should separate genuine delays, approved extra work and missed obligations, then explain what happens in each case.
Website projects often change because you learn more as you go. That's normal. The problem is when extra requests, slow approvals or unclear scope turn into surprise invoices and missed launch dates.
A strong change request process keeps the project fair. It should require any extra work to be agreed in writing before the developer starts it. That written approval should cover:
- what the extra work is
- how much it will cost
- whether it affects the timeline
- whether it affects later milestones
- who needs to approve it for your business
Your contract should also deal with delays caused by you. For example, if you take three weeks to provide product photos, website copy or approvals, the developer may need an extension. That's reasonable if the contract says how extensions work.
For delays caused by the developer, the agreement can include notice and cure steps. For example, if a milestone is 10 business days late, you can give written notice requiring a revised plan and delivery date. If the delay continues, you may have rights to pause payments, reduce scope, terminate future work or recover prepaid amounts for work not delivered, depending on the wording.
The Australian Consumer Law may also be relevant where services are supplied to your business, including guarantees that services are provided with due care and skill and within a reasonable time if no time is agreed. How those rights apply can depend on the contract value, the type of services and your circumstances.
If the project starts going off track, keep records early. Save signed contracts, scope documents, invoices, messages, change requests, meeting notes, test results and screenshots. It's much easier to resolve an issue when you can show exactly what was promised and what happened.
What Handover Obligations Should You Ask For?
You should ask for enough handover material to run, maintain and move the website without relying on the original developer forever.
Handover is one of the most overlooked parts of a website development contract Australia startups use. The site might look finished on launch day, but if you don't have the right files, logins and instructions, you're still dependent on the developer.
Your handover clause should be practical. Ask for:
- administrator access to the content management system
- domain registrar access or confirmation the domain is in your business name
- hosting access or transfer instructions
- source code repository access
- database export or backup files
- plugin, theme and licence information
- API keys and integration details, where appropriate
- basic technical documentation
- training for your team, if agreed
- a final list of ongoing costs and renewal dates
Be careful with shared passwords. A better process is for the developer to create accounts in your business name or transfer admin rights to you, then remove their own access when the project ends.
You should also ask what happens if you terminate the project before completion. For example, do you receive work completed to date? Do you receive source files for paid milestones? Is the developer allowed to withhold files until invoices are paid? These are commercial points you can negotiate upfront.
Good handover terms don't mean you don't trust your developer. They just mean your business can keep operating if your team changes, your developer becomes unavailable, or you decide to move providers later.
Key Takeaways
- Have a written website development agreement before you pay a deposit or give system access.
- Link payments to milestones, and include a clear acceptance testing process before final payment.
- Deal with IP ownership carefully, especially custom code, designs, source code and third-party tools.
- Make sure your business controls key accounts like hosting, domains, analytics and admin logins.
- Use a written change request process so extra work, extra fees and delays don't become messy.
- Ask for a proper handover, including source code, credentials, documentation and ongoing cost details.
If you'd like help with your website development agreement, IP ownership clauses, milestone payment terms or hosting and handover requirements, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.
Drafted by Taylor, Sprintlaw's AI, and overseen by Alex Solo. How we write







