<human>: (Canada/Alberta)

My current employer set up a website and domain through a third party IT technician not employed under their company. Recently my boss had sent in 10 pictures he wanted added to the site (just in a gallery where other pictures were previously) and the IT guy billed him for 9 hours of work at $75 an hour = $675. When he emailed him about it the guy tried to defend himself by saying the cost was for "code snippets" and time spent "resizing photos for thumbnails". This was not the first time he'd done this as when our receptionist requested that she be added as an admin on *our company's* Facebook page he billed us an hour for it (I'm sure there are people here who know how FB pages work and how that's completely BS).

We would've just cut him out of the formula if not for the fact that after checking a whois on our company site returned him as the registered owner, admin, and technician, as well as the bill payee (he pays GoDaddy and then invoices us the domain renewal fee, probably with a hefty markup). If we wanted him to transfer the rights over to us he probably wouldn't let go without demanding a hefty fee *even though* he has already billed us quite extravagantly for his services provided up to this point. We would prefer not having to change to another domain because of business cards and current clients who email to inboxes that are on our current domain. What exactly are our options and rights in this situation?

Can you summarize the given text in a few sentences?
<bot>: my nice but tech-illiterate bosses are getting screwed over by a guy who has a stranglehold over our company domain and demanding unreasonable payments for performing menial tasks