Privacy Policy

Last updated: September 25, 2026

Lugo respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit lugosystems.com, contact us, or use our services.

1. Who we are

Lugo provides cloud-based software for 3D configuration, CPQ (Configure, Price, Quote), and ERP solutions for the construction industry.

For questions regarding this Privacy Policy or how we process personal data, please contact us:

Lugo
Virkesvägen 2
941 41 Piteå
Sweden
Email: hello@lugo.se

2. Information we collect

Depending on how you interact with us, we may collect personal information such as:

Name
Company name and job title
Email address and phone number
Information you provide when contacting us or submitting a form
Account and user information when using our services
Technical information such as IP address, browser type, device information, and usage data

We only collect information that is reasonably necessary to provide our services, communicate with you, improve our products, or operate our website.

3. How we use your information

We may use personal data to:

Respond to inquiries and requests
Contact you regarding Lugo and our services
Manage customer and prospective customer relationships
Create and administer user accounts
Provide, operate, maintain, and improve our software and services
Understand how our website and services are used
Monitor performance and security
Prevent fraud, misuse, and security incidents
Comply with legal and regulatory obligations
Send relevant product or company information where permitted by law

4. Legal basis for processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data based on one or more of the following legal grounds:

Contract – where processing is necessary to provide a service or fulfil an agreement with you or your company.

Legitimate interests – where processing is necessary for our legitimate business interests, such as operating and improving our services, maintaining security, communicating with customers and prospective customers, and developing our business.

Consent – where you have given us permission to process your information for a specific purpose, including the use of non-essential cookies and analytics where required.

Legal obligation – where processing is necessary for us to comply with applicable law.

5. Customers using Lugo

When a company uses the Lugo platform, that company may enter or process personal data relating to its own customers, employees, suppliers, or other individuals.

In these situations, the customer will generally act as the data controller, while Lugo acts as a data processor and processes the information on behalf of the customer and according to its instructions.

The processing of such data may also be governed by a separate Data Processing Agreement (DPA) between Lugo and the customer.

If you have questions regarding personal data entered into Lugo by one of our customers, you should normally contact that customer directly.

6. Sharing of personal data

We do not sell your personal data.

We may share personal data with trusted service providers that help us operate our business and provide our services. These may include providers of:

Cloud hosting and infrastructure
Website hosting and functionality
Email and communication services
Analytics services
Customer relationship management systems
Technical support and security services

These providers may only process personal data for the purposes for which they have been engaged and subject to appropriate contractual and security requirements.

We may also disclose information where required by law, regulation, court order, or a competent authority.

7. International data transfers

Some of our service providers may process personal data outside the European Union or European Economic Area.

Where personal data is transferred internationally, we take appropriate measures to ensure that the information receives an adequate level of protection in accordance with applicable data protection law. This may include adequacy decisions issued by the European Commission or approved safeguards such as Standard Contractual Clauses.

8. How long we keep your information

We retain personal data only for as long as necessary for the purposes for which it was collected, including providing our services, maintaining business relationships, fulfilling contractual obligations, and complying with legal requirements.

Retention periods may vary depending on the type of information and the reason for processing it.

When personal data is no longer required, it will be deleted or anonymized in accordance with applicable legal requirements.

9. Cookies and analytics

Our website uses cookies and similar technologies to operate correctly and to help us understand how visitors use the website.

Squarespace

Our website is built and hosted using Squarespace. Squarespace may place cookies that are necessary for the website to function properly, including cookies related to security, performance, user preferences, and website functionality.

Essential cookies may be used without consent where they are strictly necessary for the operation of the website.

Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics may collect information such as:

Pages visited
Time spent on the website
Approximate geographic location
Device and browser information
Referring websites and traffic sources
Interactions with the website

Google Analytics uses cookies and similar technologies to collect this information.

Where required by applicable law, Google Analytics will only be activated after you have given your consent through our cookie banner.

You can withdraw or change your consent at any time through the cookie settings available on our website.

Information collected through Google Analytics may be processed by Google in accordance with Google's applicable privacy terms and data processing arrangements.

10. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or misuse.

While no internet-based service can guarantee absolute security, we work to maintain an appropriate level of protection for the information processed through our systems.

11. Your rights

If the GDPR applies to the processing of your personal data, you may have the right to:

Request access to your personal data
Request correction of inaccurate personal data
Request deletion of your personal data
Request restriction of processing
Object to certain processing
Request portability of your personal data
Withdraw consent where processing is based on consent

Some of these rights may be subject to limitations under applicable law.

To exercise your rights, contact us at hello@lugo.se.

You also have the right to lodge a complaint with the relevant data protection authority. In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).

12. Third-party websites

Our website or services may contain links to third-party websites or services. Lugo is not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before providing personal information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or how we process personal data.

The latest version will be published on our website together with the date it was last updated.

14. Contact us

If you have questions about this Privacy Policy or how Lugo processes personal data, please contact: