Still using the email address you made at school? What it quietly costs a growing side business

The photographer who shot a friend’s wedding last summer now has a waiting list. The developer who built one website for a local shop has four clients. The baker who started with a market stall is quoting for corporate orders. In every case the work has become a business. In most cases the email address has not.

It is usually something created years ago, on a free provider, with a name that made sense at the time and does not survive being read aloud to a client. It still works, so it stays. But an email address is doing more jobs than most people realise, and a free personal one is quietly bad at nearly all of them.

The first impression you did not know you were making

When a quote arrives from a name at a free provider, the reader makes a judgement in about a second. Not a conscious one, and not necessarily a fair one, but a real one. The same quote from an address at your own domain reads as an established operation rather than a favour being done at the weekend.

There is a practical dimension too. Messages from free consumer providers are more likely to be filtered when they contain attachments, links and pricing, which is precisely what a quote contains. Plenty of freelancers have lost a job to a spam folder without ever finding out.

The risk nobody thinks about until it happens

Here is the part that matters more than branding. Your email account is not one account. It is the recovery route for every other account you own.

Think about what a stranger could do with an hour inside your inbox. Reset your accounting software. Reset your booking system. Reset your bank if the second factor is weak. Read years of correspondence with clients, including addresses, phone numbers, contracts and, if you are a photographer or a tutor or a childminder, details about their families.

When that inbox is also your personal one, the blast radius covers your whole life. Separating business correspondence onto its own domain is not only about looking professional. It limits the damage when something goes wrong, and it makes it far easier to hand over or shut down cleanly.

What changes when you move

Moving to a professional email service on your own domain takes an evening. You register the domain, point a couple of DNS records at the provider, and set up addresses that describe functions rather than people, so hello and accounts and bookings can be reassigned later without changing anything on your invoices.

You also get administrative control, which sounds corporate but matters the moment you take on help. When a part time assistant leaves, you close their mailbox rather than hoping they forget the shared password. And a provider that encrypts message contents means the archive of client correspondence is not readable by the company hosting it, which is a reasonable thing to want when that archive contains other people’s personal data.

The habits that matter more than the provider

Technology is only part of it. The National Cyber Security Centre’s guidance on how to secure your email is written for small organisations and takes ten minutes to read. The essentials are unglamorous and effective: two step verification on the account, a long unique password kept in a password manager rather than in your head, and passkeys where the provider supports them.

Add one behavioural rule. Never change payment details because an email told you to. Confirm it by phone on a number you already had. Invoice redirection fraud is one of the most costly categories of online crime reported worldwide, with losses running into billions of pounds each year according to the FBI’s 2025 Internet Crime Report, and small suppliers are targeted precisely because they rarely verify.

What to do with the old address

Do not delete it. Set up forwarding so anything sent there still reaches you, and leave it running for at least six months. Old clients, directories and forms will keep using it for longer than you expect, and a bounced enquiry is a lost job.

Do use the transition as an audit. Work through the accounts registered to that address and move the ones that belong to the business, then close the ones you no longer use. Most people are surprised by how many dormant accounts are sitting on an address they have had since school, each one a small open door.

A reasonable weekend job

Register the domain. Choose a provider and add the DNS records it gives you. Create two or three role based addresses. Turn on two step verification. Set up forwarding from the old address for six months and update your invoice template, your website footer, your social profiles and your bank.

Total cost, less than a couple of coffees a month. Total effort, one evening. The version of your business that exists in a client’s mind starts with the address the message came from, and the version that survives a bad day depends on how well that account is locked down.