Martin George, programme and compliance manager at the Foundation for Social Improvement (FSI), provides guidance on best data practices and implementing general data protection regulation (GDPR) in small charities