Website Development Agreement (Singapore)

A Website Development Agreement in Singapore sets out the rights and obligations the parties agree to be bound by.

The agreement typically covers the project scope (wireframes, design mockups, front-end and back-end development, content management system integration, hosting configuration, and user acceptance testing), the development timeline with milestones, the payment schedule tied to deliverables, and the ownership of intellectual property in the completed website. Under Singapore law, copyright in a website (including source code, graphic design, and written content) vests in the author unless a written assignment transfers ownership to the commissioning party. Section 130 of the Copyright Act 2021 governs the ownership and assignment of copyright in works created under a contract for services.

Website development projects in Singapore frequently involve the processing of personal data — user registration, contact forms, payment processing, and analytics tracking. The Personal Data Protection Act 2012 (PDPA) imposes obligations on organisations that collect, use, or disclose personal data through websites. Section 24 of the PDPA requires organisations to implement reasonable security arrangements to protect personal data, and the Personal Data Protection Commission (PDPC) has penalised businesses whose websites suffered data breaches due to inadequate security measures.

A Website Development Agreement differs from a software licensing agreement, a mobile application development agreement, and a digital marketing agreement. Software licensing governs the right to use existing software products. Mobile app development covers native or hybrid applications for iOS and Android platforms. Digital marketing agreements govern online advertising, search engine optimisation, and social media campaigns. Each of these may be ancillary to but distinct from the core website development engagement.

The Competition and Consumer Commission of Singapore (CCCS) and the Consumer Protection (Fair Trading) Act (Cap. 52A) protect clients against unfair practices by developers, including misrepresentation of capabilities, hidden charges, and failure to deliver agreed specifications. Under Singapore law, Section 169 of the Companies Act 1967 (Cap. 50) and Section 8 of the Employment Act 1968 (Cap. 91) govern the core requirements for this type of document.

A Website Development Agreement is needed in Singapore whenever a business, organisation, or individual commissions a third party to build or redesign a website.

When a startup or SME engages a freelance developer or agency to build its first corporate website, the agreement defines the scope of deliverables, prevents scope creep, and protects both parties if the project encounters delays or disputes. The Infocomm Media Development Authority (IMDA) administers grants such as the Productivity Solutions Grant (PSG) that subsidise website development costs for qualifying SMEs, and grant conditions often require a written development agreement.

When an e-commerce business commissions a developer to build an online store with payment gateway integration, the agreement must address PCI-DSS compliance for payment card data, the developer's obligations regarding secure coding practices, and liability for data breaches. The Monetary Authority of Singapore (MAS) and the PDPC both impose regulatory expectations on organisations that process payment data through websites.

When a government agency or statutory board procures website development services, the procurement must comply with the Government Procurement Act (Cap. 120) and GeBIZ (Government Electronic Business) tendering procedures. The development agreement incorporates the standard government IT terms and conditions published by the Government Technology Agency (GovTech).

When a business requires ongoing website maintenance, hosting, and content updates after the initial build, the agreement should include a post-launch support schedule specifying response times for bug fixes, security patches, and feature enhancements. Maintenance obligations are a frequent source of disputes in Singapore, and a written agreement reduces ambiguity.

When the website involves the collection of user data — registration forms, cookies, analytics — the agreement should allocate responsibility for PDPA compliance between the client and the developer, including the preparation and implementation of a privacy policy, cookie consent mechanism, and data breach response plan. Under Singapore law, the common-law requirements for a valid contract — offer, acceptance, consideration, and intention to create legal relations — and Section 169 of the Companies Act 1967 (Cap. 50) govern the core requirements for this type of document.

A well-drafted Singapore Website Development Agreement should include the following elements to protect both the client and the developer.

Parties: The full legal names and Unique Entity Numbers (UEN) of the client and the developer (or development agency). Where the developer is a sole proprietor, the NRIC or FIN number should be recorded.

Project Scope: A detailed specification of the website to be developed, including the number of pages, design requirements (wireframes, mockups, brand guidelines), functionality (CMS integration, e-commerce features, contact forms, user authentication), technology stack (front-end framework, back-end language, database, hosting environment), and third-party integrations (payment gateways, APIs, analytics tools). A well-defined scope prevents disputes over deliverables.

Timeline and Milestones: A project schedule with clearly defined milestones — such as wireframe approval, design sign-off, development completion, user acceptance testing (UAT), and go-live date — and the consequences of delay by either party.

Payment Terms: The total project fee, the payment schedule tied to milestones (typically 30% upfront, 30% on design approval, 30% on UAT completion, 10% on go-live), accepted payment methods, and late payment interest. GST at 9% applies to website development services provided by a GST-registered developer under the Goods and Services Tax Act (Cap. 117A).

Intellectual Property: A clear statement of IP ownership. Under the Copyright Act 2021, copyright in source code and design vests in the developer unless assigned to the client in writing. The agreement should specify whether the client receives full ownership of all IP (including source code) or a licence to use the website. Any pre-existing IP or open-source components used by the developer should be disclosed.

Warranties: The developer's warranties regarding the website's functionality, compatibility with specified browsers and devices, compliance with accessibility standards, and freedom from malware or security vulnerabilities. A warranty period (typically 30 to 90 days post-launch) during which the developer will fix defects at no additional cost should be specified.

PDPA Compliance: Allocation of responsibility for Personal Data Protection Act 2012 compliance, including the development and implementation of a privacy policy, cookie consent banner, data collection forms with consent mechanisms, and technical security measures (SSL/TLS encryption, secure authentication, data encryption at rest). Organisations building websites through forms-legal.com can customise PDPA clauses to match their data processing activities.

Liability: A limitation of liability clause capping the developer's total liability (typically at the total project fee) and excluding liability for indirect, consequential, or economic losses. Mutual indemnities for IP infringement and data breaches should be considered.

Termination: The circumstances under which either party may terminate the agreement — such as material breach, insolvency, or failure to meet milestones — and the consequences of termination, including payment for work completed, return of materials, and IP ownership of partially completed work.

Confidentiality: Mutual obligations to keep project-related information (business plans, pricing strategies, source code, user data) confidential during and after the project.

Governing Law and Dispute Resolution: Singapore law as the governing law, with disputes subject to the jurisdiction of the State Courts or, for larger claims, the High Court of Singapore. Arbitration under the Singapore International Arbitration Centre (SIAC) may be appropriate for cross-border engagements. Under Singapore law, Section 169 of the Companies Act 1967 (Cap. 50) and Section 8 of the Employment Act 1968 (Cap. 91) govern the core requirements for this type of document.