act, attorney, justice, lawyer, note, files editing, law firm, bureaucracy, filing, fascicles, files, files shock, pile of files, personal data, privacy policy, data collection, office, office work, dictation, write, attorney letter, opposing side, opponents, dish, lawyer, lawyer, law firm, law firm, law firm, law firm, law firm
Photo by BunteAufnahmen on Pixabay

Rules and ethics

London web design: checking company and ICO records

A practical guide to checking a London web design agency's Companies House filings, PSC details, filed accounts and ICO register entry before you sign.

What to take away

  • Every serious check of a web design agency starts with the registered company, not the portfolio or the pitch deck.
  • Companies House gives you the company number, filing history, accounts and confirmation statements, all free to read.
  • The PSC register names the people who really control the business, which often differs from the names on the website.
  • The ICO register of fee payers shows whether the agency has paid its data protection fee, which matters if it handles client data.
  • Two London agencies with similar websites can look very different once you line up their filings side by side.

Why a London web design agency check starts with identity, not reputation

London has the deepest agency market in the UK. That cuts both ways. Choice is wide, and so is the range of business models hiding behind a polished homepage.

A trading name proves nothing. A limited company name proves little more. What you can verify is the registered entity: its number, its filings, its officers, its owners and its data protection status.

That is why this site treats identity as the first rung of the evidence ladder shown. Awards and case studies sit higher up, and they only carry weight once the entity underneath them checks out.

The order matters. Reputation is easy to manufacture with a good template and a few testimonials. A filing history is not.

A London web design agency pitching ecommerce work will usually be a private limited company registered in England and Wales. Some are LLPs. A few trade through a parent. All of those are findable.

Start with the company number on the footer, the invoice or the proposal. If an agency will not give you one before a contract, that is your answer.

Reading Companies House filings, accounts and confirmation statements

Companies House is the UK registrar for limited companies, LLPs and other entities. Its public register is free to search by name or company number.

Search the exact name. London has plenty of near-identical names, so confirm the number matches what the agency gave you rather than trusting the top result.

Once you have the right record, work through these steps.

Six checks on a Companies House record

  1. Check incorporation date and company status
  2. Open filing history, look at pattern
  3. Read filed accounts for net assets
  4. Check SIC codes match web design
  5. Look at registered office address
  6. Note any registered charges

A confirmation statement is the annual filing that confirms the company's details are correct: officers, shareholders, registered office and share capital. It is not a financial document, but a gap in confirmation statements is a gap in governance.

Filed accounts are the numbers. For a micro-entity, expect a short balance sheet with no profit and loss. That limits what you can conclude, and you should say so rather than pretending the accounts prove turnover.

Directors carry statutory duties under UK company law, from promoting the success of the company to keeping proper records. Those duties sit with named people you can check. GOV.UK sets out the duties of a company director if you want the detail before a meeting.

The wider compliance picture, from registration to filing, sits within running a UK business and the records it generates.

One caution. A dormant company with a beautiful website is possible. Dormant accounts and active trading do not sit together, so ask.

The PSC register and what it reveals about control

The PSC register is the register of people with significant control. Companies must keep it and report the details to Companies House.

A person with significant control usually holds more than 25 per cent of shares or voting rights, or can appoint or remove a majority of the board. GOV.UK explains who counts as a PSC.

Why does this matter to a client in London? Because the person who signs your contract may not be the person who controls the company.

Agencies change hands. Founders leave. A holding company may sit above the trading entity. The PSC register shows whether control sits with a named individual, a corporate entity or a trust.

If a corporate PSC appears, follow it up. That usually means a parent or investor, and it can change who decides on your project if things go wrong.

You can read the PSC register in the same free Companies House record as the officers and filing history.

Pair that with the officer list. How long have the directors been in post? Has there been a run of appointments and resignations in the last two years? Churn at the top is a signal.

This is the point where a shortlist becomes a real comparison, with identity inspected before reputation.

Checking the ICO register of fee payers

The Information Commissioner's Office is the UK's data protection regulator. Most organisations that process personal data must pay an annual data protection fee and appear on the register of fee payers.

A web design agency will often process personal data: contact forms, analytics, CRM integrations, hosting, email marketing. That usually brings it within the fee regime.

The ICO register of fee payers is the public record to check. Look for the agency's entry and any stated exemption.

Search the register of fee payers by company name. Check that an entry matches the agency's registered company name and is current. A lapsed entry or no entry deserves a direct question.

Ask three things in writing. Which registered entity does the ICO entry relate to? If there is no entry, which exemption applies? Who is your data protection lead or DPO?

If the agency hosts or manages personal data for you, it will often act as a processor under UK GDPR and the Data Protection Act 2018. That should be covered in a written contract with processing terms.

A missing ICO entry is not automatically fatal. Some small agencies fall under an exemption. But the answer should be specific, not vague.

For anything involving client data, you want identity, data and exit checks before signature, not after.

An illustrative example of company and ICO record checks

Imagine two agencies pitching the same Shoreditch client. Both have strong portfolios and similar day rates. Call them Agency A and Agency B.

Agency A vs Agency B on filings

Agency A

Incorporated
2016
Accounts
On time yearly
Directors
Two, since start
PSC
Named individual 75%
Registered office
Accountant, Islington
ICO fee payers
Current tier 1

Agency B

Incorporated
2021
Accounts
First set late
Directors
Three in, two out
PSC
Overseas corporate entity
Registered office
Serviced, shared
ICO fee payers
No entry found

Agency A. Registered in 2016. Company status active. Accounts filed on time each year, small company format, net assets positive. Confirmation statements filed annually with no gaps. Two directors, both in post since incorporation. PSC register shows one individual with 75 per cent or more of shares and voting rights. Registered office at an accountant's address in Islington. ICO register of fee payers shows a current tier 1 entry matching the company name.

Agency B. Registered in 2021. Company status active. Accounts filed, but the first set was late. Confirmation statements show three director appointments and two resignations in two years. PSC register shows a corporate entity registered overseas, with no named individual. Registered office is a serviced address shared with many companies. No entry found on the ICO register of fee payers.

On portfolio alone, the two look comparable. On filings, they are not.

Agency B is not disqualified. It may be a fast-growing studio with a new holding structure. But every one of those points needs an answer before money changes hands.

Now run the same steps yourself.

  • Company number confirmed against the proposal or invoice
  • Company status active, with no strike-off or insolvency notices
  • Filing history shows accounts and confirmation statements on time
  • Filed accounts read, with the accounting format noted
  • PSC register checked and any corporate owner followed up
  • ICO register of fee payers checked by company name
  • Data processing terms and exit plan agreed in writing

That last row is the one clients skip. It is also the one that decides how cleanly you can leave.

A shortlist built on verified company records still proves less than it appears to. Filings confirm the entity exists and is being run. They do not confirm the agency can deliver your project.

Use them as the floor, not the ceiling.

Common questions

Can I check a London web design agency for free?

Yes. Companies House search, filing history, accounts, officers and the PSC register are free to view. The ICO register of fee payers is also free to search.

What if the agency trades under a different name to the company?

That is common and usually fine. Ask for the registered company name and number, then check that entity. A trading name has no separate legal status.

Does a micro-entity accounts filing tell me anything useful?

It tells you net assets, cash and solvency on paper. It will not show turnover or profit, so treat it as a floor rather than a full financial picture.

Is the PSC register always a person?

No. It can name a company or a trust. If a corporate PSC appears, ask who ultimately controls it and how decisions about your project get made.

What if the agency is not on the ICO register of fee payers?

Ask which exemption applies and get it in writing. If it processes personal data for you and cannot explain its position, treat that as a live risk.

Do filed accounts prove an agency is financially healthy?

No. They show what the company chose to file within the rules. Pair them with payment terms, references and a clear exit clause in your contract.

More in Rules and ethics