Legal
Privacy Policy
Last updated: September 2026 · Luday AB
Who We Are
Luday AB (“Luday”, “we”, “us”, “our”) is a technology company registered in Sweden. Our registered address is Theres Svenssons gata 13, 41755 Gothenburg, Sweden. We can be reached at info@luday.se.
As a company operating within the European Union, we are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish data protection law.
What Data We Collect
We collect the following categories of personal data:
- Contact form data: your name, email address, the service you are interested in, and your message. When you submit the form, it is delivered to our team by email.
- Communication data: emails you send us, including any other details you choose to share, such as a phone number or company name
- Usage data (only with your consent): pages visited, how you arrived at our site, browser and device type, approximate location and time spent on the site, collected with Matomo analytics. Your IP address is anonymised before it is stored.
- Technical data: when you submit the contact form, our server briefly uses your IP address to protect the form against spam and abuse. It is held in memory only and is not stored.
- Contractual data: data necessary to deliver our services such as project details and billing information
How We Use Your Data
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries | Legitimate interest / Pre-contractual steps |
| Delivering contracted services | Performance of a contract |
| Sending service updates | Legitimate interest |
| Website analytics (Matomo) | Consent, given through our cookie banner |
| Protecting the contact form against abuse | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
We do not sell, rent, or trade your personal data to third parties.
Data Sharing
Analytics stays with us. We run our own Matomo analytics server (matomo.luday.se). Analytics data is not shared with Matomo or any other third party, and is not used for advertising.
We may share your data with:
- Service providers acting as data processors on our behalf, such as our hosting and email delivery providers, all bound by data processing agreements
- Legal authorities where required by applicable law
All third-party processors used by Luday are either located within the EU/EEA or subject to appropriate safeguards such as Standard Contractual Clauses.
Our website does not load fonts, scripts or tracking pixels from Google, social networks or advertising networks. Links to our social media profiles are plain links; those sites only receive data about you if you choose to visit them.
Data Retention
We retain personal data only for as long as necessary for the purpose it was collected:
- Contact enquiries: up to 12 months after last contact, unless a business relationship develops
- Client project data: for the duration of the engagement plus 7 years to comply with Swedish accounting law
- Analytics data: raw visit data is deleted after 25 months; only aggregated statistics, which cannot identify you, are kept after that
Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (the “right to be forgotten”), subject to legal obligations
- Restrict processing in certain circumstances
- Data portability: receive your data in a structured, machine-readable format
- Object to processing based on legitimate interest
- Withdraw consent at any time where processing is consent-based
To exercise any of these rights, contact us at info@luday.se. We will respond within 30 days.
You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), at imy.se.
Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), access controls, and regular security reviews.
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at info@luday.se.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “last updated” date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.
For significant changes affecting how we use your data, we will notify you directly where we hold your contact information.
Contact
For any privacy-related questions, requests to exercise your rights, or concerns about how we handle your data, please get in touch: