Russell Hobbs™ Privacy policy
Last updated November 2025
1. About this Privacy Notice
At Spectrum Brands (UK) Limited ("SPB", "us", "we", or "our") we respect your privacy, and we want to be transparent about the types of Personal Data (as defined below) that we collect about you and how we use it. This Privacy Notice (hereafter the "Notice"), explains how we collect, use and share any information gathered about you ("Personal Data") through your use of the CALM™ CONNECTED KETTLE (the "APP") and aims to inform you about the rights that you can exercise with regard to our use of your Personal Data.
The APP is managed by SPB, headquartered at Regent Mill, Fir Street, Manchester, UK M35 0HS, who is the data controller for all Personal Data that is collected via the App. For more information about the APP, please see the "Terms and Conditions" section of the APP.
If you do not want SPB to process any of your Personal Data through the APP as set out in this Notice, you should not install and use the App. Please note that some device features can only be provided via the APP and therefore, the use of those features requires the use of the APP.
2. Quick links
We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Notice, then you can click on the relevant link below to jump to that section. For further information on our policies, including our Cookie Policy, click here https://uk.russellhobbs.com/cookie-policy. 3. Information on the processing of your Personal Data
When you use the APP, we collect the following types of Personal Data about you, which we will process for the purposes described below:
Data processing situation | | Why we collect it | Legal basis |
|---|
Registration and set up of user account in the APP | Account details that we will collect directly from you: Account or profile data, such as user email address, phone number, username and login credentials, nickname, avatar, country code, language preference and time zone information. You will also have the option to create an avatar for your profile using your camera to take a photo, or upload a photo from your library. | We process this personal data to register your user account and authenticate you when you log in, to grant you access to the APP 's services, and to send you technical or legal notices, updates, security alerts, or other messages relating to your use of the APP. | The legal basis for this processing is contractual necessity, as this processing is necessary for the performance of the contract between you and us for the use and provision of the APP. |
Connection to your CALM™ CONNECTED KETTLE | Information that you provide by connecting your kettle to the APP, specifically: The product category and device name, model, version, and location of your kettle as well as your individual settings: Including your temperature setting, customization of lighting and personalization of kettle name. This information is either collected automatically from your device (in the instance of the device name, model, version, location, etc.) or provided by you directly (in the instance of your individual settings). | We process this data to provide the APP's services and related updates to you, and to enable you to connect your mobile device to the Calm™ Connected Kettle through the APP. | The legal basis for this processing is is contractual necessity, as this processing is necessary for the performance of the contract between you and us for the use and provision of the APP. |
Use of your CALM™ CONNECTED KETTLE | Details about the use of your device, that we collect automatically in relation to your use of the APP: On/off status, lighting colour of your CALM™ CONNECTED KETTLE per your individual settings, temperature controls, use of the music feature, connection to other apps. | We process this data to provide the APP's services to you. | The legal basis for this processing is contractual necessity, as this processing is necessary for the performance of the contract between you and us for the use and provision of the APP. |
Device operation logs | Mobile device information that we collect by automated means from your device: Device information includes the device's MAC address, IP address, wireless connection information (including time of access), operating system type and version, application version number, push notification identifier, log file and mobile network information, language preference setting and device location information; | We process this data to provide the APP, and to connect the APP with your kettle. In addition, we process this data for troubleshooting and to improve the APP's functionality and prevent and eliminate misuse and malfunctions. Device operation logs are deleted automatically after 7 days. | The legal basis for this processing is contractual necessity, as this processing is necessary for the performance of the contract between you and us for the use and provision of the APP. We have a legitimate interest in ensuring the functionality and error-free operation of the APP and in being able to offer a service that is in line with the market and interests. |
Log data | SDK performance data, that we collect by automated means, such as MQTT connection rate, socket connection rate and other desensitized business data. | We process this data to provide the APP's services to you and to improve the APP. | The legal basis for this processing is contractual necessity, as this processing is necessary for the performance of the contract between you and us for the use and provision of the APP. |
Family system | When creating or using home devices, customized user family name that you provide. Furthermore, we automatically collect device name, device ID, and device location information; | We process this data to provide the APP's services to you and to enable you to set up a family system in the APP. | The legal basis for this processing is contractual necessity, as this processing is necessary for the performance of the contract between you and us for the use and provision of the APP. |
Contact data | This may include user email address, mobile phone number and feedback content that you provide directly to us. | If you contact us using the contact details provided in the APP, we will process the personal data you provide in order to respond to your query, or to provide you with updates about the system, the terms of use, or the privacy policy. | The legal basis for this data processing is contractual necessity, specifically the performance of a contract, if your request is related to a contract that you wish to conclude or have concluded with us, for example concerning the provision oof the APP. The legal basis for processing your personal data for this purpose can also be our legitimate interest pursuant to in responding to your inquiries to the extent necessary and taking your feedback into account. |
4. Technical settings
You can enable push notifications via the APP by activating push notifications for the APP on your device. If you do so, your device is registered with the push service provider for the purpose of receiving push notifications using a pseudonymous identifier provided by your operating system provider.
You can also allow the APP to access your mobile device's microphone. This creates the technical conditions for digital voice assistants (Amazon Alexa or Google Assistant) to access the data provided by the microphone in your device as part of their service provision. In addition, Amazon and Google regularly process your device ID, product category, device name, device model name, name of device manufacturer, device version.
Activation on the device side creates the technical conditions for the delivery of push notifications to your device or for the use of the microphone when you use the APP. You can disable access at any time in the settings of your mobile device. The option to withdraw your data protection consent granted beyond device-side activation remains unaffected.
5. Sign in with Google, Facebook or X
If you choose to sign in using your Google, Facebook or X account, we will receive certain personal data from Google, Facebook or X, depending on which service provider you use, such as your name, email address, and language. This data is used solely to authenticate your identity, create your user account with SPB and provide you with access to the APP and our services. The processing of your personal data in connection with Google, Facebook or X sign-in is based on your explicit consent (Article 6 (1) lit. a GDPR), which you provide when you choose to use this login method. For more information on how Google, Facebook or X handle your data, please refer to the respective Privacy Policies of these services.: https://policies.google.com/privacy; https://www.facebook.com/about/privacy; https://twitter.com/en/privacy. 6. Sharing of your Personal Data
SPB may disclose your Personal Data to the following categories of recipients:
(a) to our group companies for purposes consistent with this Privacy Notice. We take precautions to allow access to Personal Data only to those staff members who have a legitimate business need for access and with a contractual prohibition of using the Personal Data for any other purpose.
(b) to our third-party vendors, services providers and partners who provide data processing services to us, or who otherwise process Personal Data for purposes that are described in this Notice or notified to you when we collect your Personal Data. This may include disclosures to third party vendors and other service providers we use in connection with the services they provide to us, including to support us in areas such as IT platform management or support services, infrastructure and application services, marketing, data analytics.
(c) to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
(d) to our auditors, advisors, legal representatives and similar agents in connection with the advisory services they provide to us for legitimate business purposes and under contractual prohibition of using the Personal Data for any other purpose.
(e) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Data only for the purposes disclosed in this Notice.
(f) to any other person if you have provided your prior consent to the disclosure.
7. Data storage, retention and deletion
If you are registering to use the APP from the EEA or the UK, the Personal Data we collect from you when using the APP is stored on servers located in the European Union (EU), specifically on AWS' servers in Frankfurt, Germany. We retain Personal Data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.
8. Transfers of Personal Data outside the UK, EU, or EEA
Our group companies and third-party service providers and partners operate globally. Your Personal Data may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.
Specifically, our servers are located globally, and our group companies and third-party service providers and partners operate in the United States and China. This means that when we collect your Personal Data we may process it in any of these countries.
However, we have taken appropriate safeguards to require that your Personal Data will remain protected in accordance with this Notice. When transferring Personal Data outside the EU/EEA, we rely on the European Commission’s Standard Contractual Clauses for transfers of Personal Data. To request more information or to obtain a copy of the standard contractual clauses we rely on, please reach out, see below at "How to contact us or our DPO".
9. Profiling
We do not make any decisions based solely on automated processing of your Personal Data, which either produce legal effects that concern you or similarly significantly affect you.
10. Minors
The APP is not intended for individuals below the age of 16. If you are under 16, please do not download the APP.
11. How we keep your personal data secure
We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures are designed to provide a level of security appropriate to the risk of processing. Specific measures we use include encrypting your personal data in transit and at rest.
Where you have created an account with us that uses a unique password to enable you to access the APP, it is your responsibility to keep this password secure and confidential.
12. Your data protection rights
You have the following data protection rights:
If you wish to access, correct, update or request deletion of your Personal Data, you can do so at any time by through the APP, or by contacting us using the contact details provided under the “How to contact us or our DPO” heading below.
In addition, you can object to processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data. Again, you can exercise these rights by contacting us using the contact details below.
If we have collected and process your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
If you have a complaint or concern about how we are processing your Personal Data, then we will endeavor to address such concern(s). If you feel we have not sufficiently addressed your complaint or concern, you have the right to complain to a data protection authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority.
You may exercise any of the rights above at any time by contacting us as described under the “How to contact us or our DPO” section below. We will respond to your request in accordance with applicable data protection laws. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
13. Updates to this Privacy Notice
We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
14. How to contact us
If you have any questions, concerns or complaints about this Notice or the way we process your Personal Data, or if you want to exercise your rights as described above, please contact us via email at the email address described in our general Privacy Policy, click here https://uk.russellhobbs.com/privacy-notice.