Private Counterfactual Retrieval With Immutable Features