In these cases, make use of the noindex tag if you just want the site not to seem in Google, but don't intellect if any consumer by using a url can get to the web page. For authentic protection, use proper authorization methods, like demanding a consumer password, or using https://rsac.org