Even if his contract stipulated that he owned the website due to nonpayment, I seriously doubt that it's legal for him to put up "This company sucks" at that company's domain and with that company's logo. And this is in the UK which has (I believe) notoriously stringent defamation and libel laws.