We are Hope & May

Who we are

Hope & May is a family-run business passionate about delivering the best possible client support.  We pride ourselves on our sector-leading trusted status and the client relationships that we have built over the years.

With many years of experience in data protection practice and law, and we are proud to specialise in helping the voluntary sector.

We are the only data protection consultancy trusted by The National Council for Voluntary Organisations (NCVO) to deliver data protection advice and guidance, training, and Data Protection Officer (DPO) representation services.

Our work is also endorsed by ACEVO, the Lloyds Bank Foundation and the Directory for Social Change. Hope & May is the only company to be trusted by all of these organisations.

It is our mission to ensure that all our clients, no matter the size located anywhere in the World, are compliant with data protection law.  That they operate lawfully and ethically, are diligent and proficient in data processing activities, and are confident they comply with their obligations.

What you can expect

  • Expert Advice

    Sector leading advice on all data protection laws anywhere in the world. With access to the very best legal information available so that we can properly consider your position.

  • Data Services

    Key services to support our clients on all data protection regulations and laws. Our services

  • Continued Learning:

    We are committed to being best in class! Our team are dedicated to remaining at the front of data laws in the UK and around the world.

  • Accessible:

    To ensure that our clients can easily access advice and guidance especially where there is an emergency or a data breach.

  • Loyalty:

    Hope & May is not a big faceless organisation, but a family run business who are passionate about delivering the best service available. We pride ourselves on the relationships we have built.

  • Partnerships:

    It’s not just about us. If you have a complex issue that may require research, we work with our associates and top professionals to ensure we fully support you.  Simply put, we have the resources necessary to ensure we provide a solution whatever the situation.

Mark Burnett GDPR.Cert - CEO & Founder

Mark has worked In Data Analysis and Data Protection Law for more than 12 years. He established one the first consultancies to offer GDPR advice and guidance to the voluntary sector and has helped over 1000 organisations to improve compliance. In 2017 he became a Certified GDPR Data Protection Practitioner. He has worked with organisations in Switzerland, Turkey, many of the EU countries, India, Pakistan and the DRC. He is a recognised fundraising trainer and London Committee member to the Chartered Institute of Fundraising.

Taylor Burnett - COO / Data Protection Practitioner & Officer

A champion for ethical data protection, I specialise in working with charities who support vulnerable individuals or work in challenging settings.

Erika De Filippo - Data Protection Practitioner & Officer

Erika is passionate about charity work and keen to support non-profit organisations in their data protection compliance. She was until recently Impact Manager and Data Protection Lead for a small charity based in Oxfordshire. Erika is aware of the range of challenges faced by the sector and highly motivated to help non-profit organisations with data protection to enable their important work.

Sofiya Mhaisale - Data Protection Practitioner & Officer

Sofiya is a foreign lawyer, and a CIPP/E qualified data protection practitioner. Having worked as an international tax lawyer in India, she also has experience in media law. She moved to the UK for her master's in International Business Law, and then entered the field of data protection. A chess player from her childhood, she also loves to travel.

Lisa Oliver - Personal Assistant

Having left college with a secretarial qualification, I went on to work in London as a PA for Deloitte and PricewaterhouseCoopers, both one of the big 8 accountancy organisations, gaining valuable experience within the accountancy sector. I later joined the international law firm, HerbersmithFreehills as a Legal PA, where I worked for over 23 years supporting partners, senior associates and associates. I am highly organised, hard-working and self-motivated. I strive to exceed expectations by providing a service that is second-to-none. I like to build and maintain genuine relationships with clients.

Matt Smithers MCIM - Head of Marketing & Performance

Matt has over 15 years senior marketing experience and over 10 years’ experience in the Not-For-Profit sector. Whilst Matt is working to ensure that Hope & May are visible to those who may need our support, he also has first hand experience of the challenges and pitfalls faced within the sector to ensure data compliance.

Data protection for the charity sector

Hope & May is proud to be the only data protection company trusted by The National Council for Voluntary Organisations (NCVO) to deliver data protection consultancy, training and Data Protection Officer (DPO) services to the NCVO’s more than 16,000 members.

Find out more about the data protection services we can offer your charity, or contact us.


We are the only trusted supplier to The National Council of Voluntary Organisations (NCVO), and work with multiple other reputable organisations.

Get in touch