Hiring a digital agency is one of the larger discretionary spends most UK small businesses make. Whether you need a new website, a paid advertising campaign, or ongoing search and social support, the wrong partner can drain budget, damage your brand, and leave you without access to the accounts and assets you paid for. The questions to ask a digital agency before you sign are the simplest way to reduce that risk.
This checklist is written for women running UK businesses. It focuses on the questions that protect your legal position, your data, and your intellectual property under the rules that apply in 2026.
Why these questions to ask a digital agency matter now
Digital marketing in 2026 is not only about websites and social posts. Agencies now routinely use AI-generated content, automated bidding tools, and third-party data processors. That creates new risks around copyright, data protection, and transparency. At the same time, UK regulators are enforcing the UK GDPR and the Data Protection Act 2018 more strictly, and the Advertising Standards Authority (ASA) continues to tighten its interpretation of the CAP Code on misleading claims.
If you are a founder without an in-house marketing team, you are the person who will be held responsible if an agency cuts corners. These questions put the burden of proof on the agency before money changes hands.
1. What exactly am I paying for?
Agency proposals often bundle strategy, creative, media spend, software licences, and reporting into one headline figure. Ask for an itemised breakdown in writing. You need to see:
- the monthly management fee;
- any media or advertising spend that passes through the agency;
- third-party tool costs, such as SEO platforms or email software;
- what is included in revisions or amends;
- whether VAT is included.
This matters for your bookkeeping and for claiming allowable expenses. It also helps you compare like-for-like quotes, because one agency’s “all-in” fee may exclude work that another agency includes.
2. Who owns the work once it is delivered?
This is the question most small-business owners forget to ask. If an agency designs your logo, builds your website, or writes your content, ownership should transfer to you on final payment. If it does not, the agency can reuse or resell your assets, or charge you again to access source files.
Check the contract for clauses on:
- source files, including website code and design files;
- licences for stock images, fonts, and plugins;
- who owns the data collected through your website or ad accounts;
- what happens to your work if the agency closes or you terminate the agreement.
For extra protection on branding, you can register trade marks through the Intellectual Property Office.
3. How do you handle data protection and cookies?
Under the UK GDPR and the Data Protection Act 2018, you are the data controller for information collected through your website and marketing. If an agency sets up tracking pixels, contact forms, or email lists without proper consent mechanisms, you are the one exposed to enforcement action.
Ask the agency:
- how they configure cookie consent banners to meet UK rules;
- whether they conduct data protection impact assessments for new tracking;
- how they store and delete subscriber data;
- what their process is for handling subject access requests.
The Information Commissioner’s Office can fine organisations up to £17.5 million or 4% of global annual turnover for the most serious UK GDPR breaches (UK GDPR, as retained in UK law, and the Data Protection Act 2018), so this is not a box-ticking exercise.
4. Are you transparent about AI use?
Many agencies now use AI to draft copy, generate images, or optimise ad bidding. That is not automatically a problem, but you should know where human judgement ends and automation begins. Ask:
- which tasks will be AI-assisted and which will be human-led;
- how they check AI outputs for accuracy and bias;
- whether AI-generated images or copy could infringe third-party copyright;
- how they disclose AI use if required by platform rules or the ASA.
If you want to explore AI tools yourself before outsourcing, see our guide to the best AI tools for UK small businesses right now.
5. What results can I realistically expect, and when?
Be wary of guarantees. No agency can promise a specific ranking on Google or a fixed return on ad spend, because platforms and competitors change constantly. What you can ask for is a clear forecast with assumptions.
A good agency should explain:
- the difference between short-term paid results and long-term organic growth;
- the metrics they will report on and why those matter to your business;
- how often you will receive reports and what format they will take;
- what happens if performance falls below agreed benchmarks.
Get any performance commitments in the contract, not just in a sales deck.
6. Will you work with my competitors?
Agencies often serve multiple clients in the same sector. That can create conflicts of interest, especially in paid search or SEO where they may be bidding on the same keywords for rival businesses. Ask directly:
- whether they currently represent any direct competitors;
- whether they have a non-compete or sector-exclusivity policy;
- how they separate data and strategies between competing accounts;
- what notice they would give you if a competitor approached them.
If sector exclusivity matters to you, negotiate it in the contract rather than relying on a verbal assurance.
7. What are the notice terms and exit process?
The Consumer Rights Act 2015 gives consumers a 14-day cooling-off period for contracts agreed away from the trader’s premises or online. Business-to-business contracts do not automatically have the same protection, so the terms you negotiate are what you are stuck with.
Before signing, check:
- the minimum contract length and notice period;
- whether fees are payable upfront, monthly, or on completion;
- what happens to your accounts, data, and assets on termination;
- whether there are any exit fees or handover charges.
If the agency controls your Google Ads, analytics, or domain registrar, make sure you are named as the owner or administrator from day one. Losing access to these accounts is one of the most common complaints when a business changes agency.
8. Can I speak to a current client?
Case studies and portfolios are useful, but they are curated. A short conversation with a current client will tell you far more about what it is like to work with the agency day to day. Ask the referee:
- whether deadlines and budgets were met;
- how responsive the agency is to requests and problems;
- whether they felt the agency understood their business;
- whether they would renew the contract.
If an agency refuses to provide a reference, treat that as a warning sign.
Red flags to walk away from
Even if the pitch is polished, some behaviours should make you pause. Be cautious if an agency:
- refuses to put scope, pricing, or ownership terms in writing;
- claims to have a special relationship with Google or Meta that guarantees results;
- will not give you admin access to your own accounts;
- pressures you to sign on the day without time to review the contract;
- cannot explain how they comply with UK GDPR or the ASA CAP Code.
Action steps before you sign
- Request itemised proposals from at least three agencies.
- Check the contract for ownership, data protection, and exit clauses.
- Confirm you will retain admin access to all accounts and assets.
- Ask for a current client reference and follow it up by phone.
- Verify the agency’s own online presence: if their website, reviews, or content look neglected, expect the same for yours.
Final thoughts before you sign
Choosing a digital agency is a commercial decision, not a creative one. The right questions to ask a digital agency focus on ownership, data protection, transparency, and accountability. Get those answers in writing, and you will be far more likely to find a partner that helps your business grow without creating legal or financial problems further down the line.
