First, encrypt the partition. Then use a partition manager to zero out the media descriptor byte. Or use the partition manager software to designate that partition some weird, off the wall OS - like CP/M86 for instance.
That way, Windows (of any flavor) will not see the partition.