@ Elham Ali
The WordPress page of your second private directory, the actual WP page where you added the shortcode, change the publish status to “Private”. Now that page will only be displayed to logged in users.
Now, to help prevent data for the private entries from “leaking”, edit each entry which exists in the private directory and set the Visibility to Private.
Hope that helps!