We are Hope & May

Who we are

Hope & May is a family-run business passionate about delivering the best possible client support.  We pride ourselves on our sector-leading trusted status and the client relationships that we have built over the years.

With many years of experience in data protection practice and law, and we are proud to specialise in helping the voluntary sector.

We are the only data protection consultancy trusted by The National Council for Voluntary Organisations (NCVO) to deliver data protection advice and guidance, training, and Data Protection Officer (DPO) representation services.

Our work is also endorsed by ACEVO, the Lloyds Bank Foundation and the Directory for Social Change. Hope & May is the only company to be trusted by all of these organisations.

It is our mission to ensure that all our clients, no matter the size located anywhere in the World, are compliant with data protection law.  That they operate lawfully and ethically, are diligent and proficient in data processing activities, and are confident they comply with their obligations.

What you can expect

  • Expert Advice

    Sector leading advice on all data protection laws anywhere in the world. With access to the very best legal information available so that we can properly consider your position.

  • Data Services

    Key services to support our clients on all data protection regulations and laws. Our services

  • Continued Learning:

    We are committed to being best in class! Our team are dedicated to remaining at the front of data laws in the UK and around the world.

  • Accessible:

    To ensure that our clients can easily access advice and guidance especially where there is an emergency or a data breach.

  • Loyalty:

    Hope & May is not a big faceless organisation, but a family run business who are passionate about delivering the best service available. We pride ourselves on the relationships we have built.

  • Partnerships:

    It’s not just about us. If you have a complex issue that may require research, we work with our associates and top professionals to ensure we fully support you.  Simply put, we have the resources necessary to ensure we provide a solution whatever the situation.

Mark Burnett GDPR.Cert - CEO & Founder

Mark has worked In Data Analysis and Data Protection Law for more than 12 years. He established one of the first consultancies to offer GDPR advice and guidance to the voluntary sector and has helped over 1000 organisations to improve compliance. In 2017 he became a Certified GDPR Data Protection Practitioner. He has worked with organisations in Switzerland, Turkey, many of the EU countries, India, Pakistan and the DRC. He is a recognised fundraising trainer and London Committee member to the Chartered Institute of Fundraising.

Taylor Burnett - Executive Director of Business Development / Data Practitioner & Officer

Taylor has worked in data protection law for over five years with a focus on a number of different business sectors. Having worked with hundreds of charities and companies in her data protection career, she champions an ethical approach to privacy. Taylor has considerable experience in assessing risk in different settings, policy development, the EU AI Act, and the UK data transfer regime. Taylor supports clients in the UK, the EU, Africa and Asia Pacific. Taylor's responsibilities include fostering new partnerships and developing corporate relations across different business sectors.

Erika De Filippo - Head of People & Operations / Data Practitioner & Officer

Erika is passionate about charity work and keen to support non-profit organisations in their data protection compliance. She was until recently Impact Manager and Data Protection Lead for a small charity based in Oxfordshire. Erika is aware of the range of challenges faced by the sector and highly motivated to help non-profit organisations with data protection to enable their important work.

Sofiya Mhaisale - Senior Data Practitioner & Officer

Sofiya is a foreign lawyer, and a CIPP/E qualified data protection practitioner. Having worked as an international tax lawyer in India, she also has experience in media law. She moved to the UK for her master's in International Business Law, and then entered the field of data protection. A chess player from her childhood, she also loves to travel.

Trisha Desai - Data Protection Practitioner & Officer

Trisha is a qualified lawyer in South Africa with four years of post-qualification experience in the GDPR and other related legal matters. She has previously worked as an in-house legal counsel handling data protection and compliance issues. In addition to her legal expertise, she enjoys discovering new destinations, cuisines and immersing herself in various cultures.

Lisa Oliver - Personal Assistant

Having left college with a secretarial qualification, I went on to work in London as a PA for Deloitte and PricewaterhouseCoopers, both one of the big 8 accountancy organisations, gaining valuable experience within the accountancy sector. I later joined the international law firm, HerbersmithFreehills as a Legal PA, where I worked for over 23 years supporting partners, senior associates and associates. I am highly organised, hard-working and self-motivated. I strive to exceed expectations by providing a service that is second-to-none. I like to build and maintain genuine relationships with clients.

Matt Smithers MCIM - Head of Marketing & Performance

Matt has over 15 years senior marketing experience and over 10 years’ experience in the Not-For-Profit sector. Whilst Matt is working to ensure that Hope & May are visible to those who may need our support, he also has first hand experience of the challenges and pitfalls faced within the sector to ensure data compliance.

Juliet Ellis – Governance and Strategy Specialist

Juliet has worked in the voluntary sector for 30 years and in that time has helped charities raise literally millions of pounds. Mentor, Trainer, Trustee and NED, she specialises in governance, strategy, review, and conflict resolution – enabling charities to run more efficiently and focus on generating income in a more streamlined, strategic way.

Data protection for the charity sector

Hope & May is proud to be the only data protection company trusted by The National Council for Voluntary Organisations (NCVO) to deliver data protection consultancy, training and Data Protection Officer (DPO) services to the NCVO’s more than 16,000 members.

Find out more about the data protection services we can offer your charity, or contact us.


We are the only trusted Data Protection supplier to The National Council of Voluntary Organisations (NCVO), and work with multiple other reputable organisations.

We are pleased to support the Chartered Institute of Fundraising by sponsoring the London and South East First Thursday events. For more information see here.

Get in touch