Private Counterfactual Retrieval