I just started hosting files for a website on my server, and I'm not sure where is an appropriate place to keep them.
At the moment, I have them in /var/www/name.of.virtualhost.site/www/.

That's obviously not secure because anything below the final public /www/ folder is also available since the /var/www/ contents are already being served up. For example, /var/www/name.of.virtualhost.site/docs/site_policies.txt is accessible via something like defaultsite.com/name.of.virtualhost.site/docs/site_policies.txt.

So where is a good place to store the files that make up a website?

(when it's a site that only I'm developing, I can obviously just stick them in /home/my_username/sites/name.of.virtualhost.site/, but that doesn't work well when I want other developers to be working on the site's files as well)

I'm running a LAMP stack, not that I expect it to matter.